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This  thesis  presents  a  new  method  of  decentralized  linear,  time-invariant  control  system  syn¬ 
thesis  based  on  the  algebraic  Riccati  equation  (ARE).  The  basic  decentralized  design  guarantees 
closed-loop  stability  and  a  predetermined  level  of  worst-cast  disturbance  attenuation.  Certain 
modifications  of  the  basic  design  guarantee  the  stability  and  disturbance  attenuation  to  be  ro¬ 
bust  despite  plant  uncertainty  or  reliable  despite  control-component  outages.  Other  modifications 
guarantee  that  a  subset  of  the  controllers  will  be  open-loop  stable. 

The  derived  decentralized  control  law  consists  of  a  full-order  observer  of  the  plant  in  each  control 
channel.  Each  observer  includes  estimates  of  the  controls  generated  by  the  other  channels  and  of 
plant  disturbance  inputs,  based  on  its  own  estimate  of  the  state  of  the  plant.  All  of  the  observer 
gains  are  computed  from  the  solution  of  a  single  Riccati-like  algebraic  equation,  while  feedback 
gains  are  computed  from  a  state-feedback  design  ARE.  The  existence  of  appropriate  solutions  to 
the  design  equations  is  sufiUcient  to  guarantee  the  various  properties  of  the  closed-loop  system. 

A  convexity  property  of  a  certain  matrix  Riccati  function  allows  parameterization  of  families  of 
control  laws  with  the  same  desired  properties.  Each  value  of  the  parameter  results  in  controller  of 
the  same  order  as  the  plant. 
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Chapter  1 


Introduction 


1.1  The  Hoc,  Control  Problem 

The  so-called  H^o  criterion  for  control  system  design  has  grown  popular  since  it  was  first  intro¬ 
duced  by  Zames  in  [37].  Defined  for  a  stable  transfer-function  matrix  T{s)  as 

liriloo-sup  (T„^{Tijuf)}  (1.1) 

(where  denotes  the  maximum  singular  value),  or  equivalently  as 

imioo=  sup  l|z|b  (1.2) 

IH|2=i 

(where  z(s)  =  T(s)ti;(s),  and  ||  •  ||3  denotes  the  root-integral-square  norm  in  either  the  time  domain 
or  the  frequency  domain),  the  Hco  norm  represents  a  worst-case  cost  when  the  objective  is  to  keep 
||z||3  as  small  as  possible. 

The  formulation  of  the  standard  H^o  contrd  problem  for  the  lineatr,  time-invariant  case  generally 
includes  a  plant  of  the  form 

i  =  Ax  +  Bii  +  Gvoo,  (1.3a) 

y  =  Cx  -h  IT,  (1.36) 

(1.3c) 

where  x  is  the  state  of  the  plant,  u  is  the  control  input,  y  is  a  measured  output,  x  is  an  output  to  be 
regulated,  and  wq  and  w  are  square-integrable  disturbances.  The  problem  is  to  design  a  feedback 
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.  controller  which  uses  the  measurement  y  to  produce  a  control  input  u  such  that,  when  the  loop  is 
closed,  the  transfer-function  matrix  from  —  {'^)  to  z  has  a  small  Hoo  norm.  This  H^o  norm 
represents  a  worst-case  disturbance  attenuation  for  the  closed-loop  system.  Figure  1.1  depicts  the 
problem  setup.  (Figures  are  grouped  at  the  end  of  the  chapter.) 

Many  familiar  problems,  in  addition  to  the  disturbance-rejection  problem,  can  be  recast  as  a 
version  of  this  standard  problem.  Figure  1.2  shows  how  a  frequency- weighted  disturbance-rejection 
problem,  a  model-reference  problem,  and  a  tracking  problem  can  be  transformed  into  the  standard 
form  of  Figure  1.1.  In  each  case,  any  exogenous  input  is  included  in  the  disturbance  vector  w,  and 
the  regulated  output  vector  z  is  the  error  to  be  minimized.  Note  that  for  the  tracking  problem,  and 
for  the  model-reference  problem  when  M(s)  is  not  strictly  proper,  z  must  be  allowed  to  depend 
directly  on  the  exogenous  input.  While  this  is  not  the  case  for  the  plant  (1.3),  this  generalization 
can  be  accommodated;  see  [15]. 

Closely  related  to  the  Hoo  disturbance-rejection  problem  is  that  of  robust  stabilization  of  a 
plant  Po(s)  -I-  A(s),  where  the  nominal  plant  Pq{s)  is  known,  but  A(s)  is  restricted  only  by  a  bound 
on  ||A||oo«  The  controller  which  solves  this  robust  stabilization  problem  with  the  largest  admissible 
bound  on  ||A||oo  is  that  which  provides  the  smallest  possible  Hoo  norm  for  the  nominal  closed-loop 
system  [38].  See  [12]  and  its  references  for  a  survey  of  the  literature  up  to  1987  on  robust  stability 
and  Hoo  performance. 

Until  quite  recently,  the  computations  for  designing  an  ^oo-optimal  controller  (summarized 
in  [23])  were  formidable:  They  included  stable  coprime  factorizations  of  the  plant  and  a  stabiliz¬ 
ing  controller,  plus  a  parameterization  of  all  stabilizing  controllers  [36],  leading  to  an  equivalent 
model-matching  problem;  inner-outer  and  spectral  factorizations,  leading  to  an  equivalent  Hoo-Loo 
approximation  problem  [24];  and  solution  of  the  Hoo-Loo  approximation  problem  by  Hankel-norm 
approximation  methods  [16]. 

Developments  in  the  last  few  years,  however,  have  simplified  Hoo  control  design  considerably. 
Results  such  as  those  in  [19],  [22],  and  [25]  have  established  that  robustly  stabilizing  control  designs 
can  be  computed  from  algebraic  Riccati  equation  (ARE)  solutions.  Still  more  recently,  [14],  [17], 
[21],  and  [39]  have  given  Hoo  disturbance-rejection  designs  also  computed  from  ARE  solutions,  and 
[3]  has  given  an  AR&based  design  which  simultaneously  gives  Hoo  aJid  LQG  cost  bounds  for  the 
closed-loop  system. 
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Given  any  control  input  u  to  the  plant  (1.3),  define  the  cost  functional 
7(u)  =  sup  “'0  €  i^2[0,  oo),  leo  ^  o| . 

Note  that  the  measurement  (1.3b),  and  hence  the  measurement  noise  w,  is  not  considered  in  this 
definition.  Therefore,  the  cost  J(u)  is  associated  with  open-loop  controls  or  state-feedback  controls. 
In  the  case  where  u  is  a  state-feedback  control,  J(u)  is  the  Hoo  norm  of  the  closed-loop  transfer- 
function  matrix  from  wq  to  z.  Define  the  optimal  cost  as 

Ooo  =  inf  {y(ti)  :  «  €  -tafO,  oo)} .  (1.4) 

The  following  theorem  from  [14]  ^ves  a  means  of  determining  Oqo,  and  also  establishes  that  there 
exists  a  state-feedback  control  law  which  achieves  any  ^oo-norm  bound  larger  than  Ooo- 

Theorem  1.1.  For  the  plant  (1.3)  with  (A,  B)  stabilizable,  and  (A,  H)  detectable,  the  bound 

Otoo  <  ot 


bolds  if  and  only  if 

A'^X  +  XA  +  ^XGG^X-XBB^X  +  B^M  =  0,  (1.5) 

with  X  >  0  and  Aa  =  A  —  BB^X  +  a~^GG^X  Hurwitz.  If  so,  then  use  of  the  state-feedback 
control  law 

u  =  -Bi^Xx  (1.6) 

stabilizes  the  plant,  and  gives  a  closed-loop  transfer-function  matrix 

r(»)  =  (/tx)  BB^xr'a 

from  Wo  to  z  satisfying  ||T||oo  <  ot. 

Note  that  there  may  be  several  solutions  A*  >  0  to  the  ARE  (1.5).  The  condition  that  Aa  must 
be  Hurwitz  specifies  a  particular  solution  A  >  0,  and  also  assures  that  the  Hamiltonian  matrix 
associated  with  the  ARE  (1.5)  has  no  ju-axis  eigenvalues. 

Theorem  1.1  establishes  a  relationship  between  /Too-optimal  control  and  LQ-optimal  control. 
The  state-flyback  control  law  given  by  (1.5)  and  (1.6)  becomes  ^oo-optimal  as  a  approaches  the 
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lower  bound  Ooo)  reflecting  a  great  concern  with  disturbance  rejection,  along  with  confldence  in 
the  disturbance  “directions”  characterized  by  the  matrix  G;  on  the  other  hand,  as  a  approaches 
oo,  the  design  becomes  LQ-optimal,  reflecting  little  concern  with  the  particular  disturbance  wq. 
Of  course,  choosing  a  very  large  in  a  design  does  not  imply  that  the  closed-loop  system  will  have 
a  very  large  Hoo  norm;  rather,  the  bound  ||r||oo  <  a  becomes  very  conservative  for  a  >  Ooo. 
An  easy  method  for  computing  a  tighter  Hoo-^orm.  bound  for  the  design  of  Theorem  1.1,  as  well 
as  for  various  ARE-based  state-feedback  designs,  is  developed  in  [28].  Applied  to  examples,  this 
method  shows  that  even  the  LQ-optimal  design  corresponding  to  a  =  oo  above  often  has  acceptable 
disturbance-attenuation  properties.  The  results  of  [28]  and  the  results  of  this  thesis  share  the  same 
AR&based  approach  to  computing  or  guaranteeing  ^oo-norm  bounds;  however,  the  results  of  [28] 
are  not  considered  here  in  detail,  since  they  are  essentially  analysis  tools  which  provide  a  posteriori 
bounds  for  systems  designed  by  several  methods.  This  thesis  is  concerned  with  new  design  methods 
which  provide  a  priori  bounds  for  the  closed-loop  systems. 

If  the  control  u  for  plant  (1.3)  must  be  generated  by  a  contrdler  that  uses  only  the  measurement 
y  given  by  (1.3b),  then  the  greatest  lower  bound  of  the  set  of  achievable  closed-loop  Hoo  norms 
is  generically  greater  than  Ooo  deflned  in  (1.4).  The  following  theorem  from  [14,13]  gives  a  means 
of  determining  this  greatest  lower  bound,  and  also  gives  an  output-feedback  control  law  which 
guarantees  any  given  ^oo*norm  bound  achievable  by  output  feedback. 

Theorem  1.2.  In  the  plant  (1.3),  assume  (A,B)  stabilizable,  (A,C)  detectable,  (A,G)  stabilizable, 
and  (A,H)  detectable.  Then  there  exists  a  stabilizing  controller  such  that  the  closed-loop  transfer- 
function  matrix  T(s)  from  w*  to  z  satisfies  ||r||oo  <  <*  if  and  only  if 

A'^X  +  XA-\-^XGG'^X -XBB'^X  =  0  (1.5) 

a* 

with  X  >0  and  Ac  s  A-  BB'^X  +  a-'^GG'^X  Hurwitz, 

AY -i-YA^ -YC'^CY -VGG'^  =  0  (1.7) 

with  Y>0,  A-  YC^C-ha-^YH^H  Hurwitz,  and 

Omax{YX}  <  a*.  (1.8) 

If  so,  then  the  output- feed  back  control  law 

(=  (a  +  -Lc'j^-h  Ly,  (1.9a) 
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u  =  -B^Xi 


(1.96) 


with 

I  =  (/  -  a-^YX)'^  YC'^  (1.10) 

stabilizes  the  plant  and  gives  a  closed-loop  transfer-function  matrix  from  Wg  to  z  satisfying  ||T||oo  < 
a. 

The  controller  (1.9)  can  be  rewritten  in  the  form 

(  =  A(-i- Bu-{-Gwo  +  L(y  —  C(),  u  =  -B^XC  (1-11) 

with 

tin,  =  (1-12) 

The  form  (1.11)  is  essentially  that  of  an  observer:  It  mimics  the  plant  dynamics  (1.3a)  and  includes 
a  correction  term  based  on  the  measurement  y.  Unlike  a  standard  observer,  it  includes  a  term 
representing  an  unmeasurable  disturbance.  Equation  (1.12)  corresponds  to  a  state-feedback  model 
of  the  disturbance  wq.  Like  an  LQG-optimal  control  law,  then,  the  Boo  control  of  Theorem  1.2  has 
an  observer  structure,  with  the  observer  gains  computed  from  an  algebraic  Riccati  equation.  As 
in  an  LQG  design,  the  observer  design  equation  (1.7)  is  a  dual  form  of  the  state-feedback  design 
equation  (1.5).  In  fact,  setting  a  =  oo  reduces  (1.5)  and  (1.7)  to  LQG  design  equations. 

The  difference  between  the  LQG  and  Boo  designs  can  be  interpreted  as  in  the  state-feedback 
case:  The  Boo  design  is  more  concerned  with  disturbance  rejection.  The  form  (1.12)  represents  an 
approximation  of  the  disturbance  =  ^G^Xx,  which  is  given  in  [33]  as  a  worst  disturbance 

in  a  game  setting  where  the  state-feedback  control  u  plays  against  the  disturbance  wq  and  initial 
conditions. 

The  set  of  all  stabilizing  output-feedback  controllers  guaranteeing  a  particular  ^oo-norm  bound 
is  ^ven  in  [13]  as  follows: 

Theorem  1.3.  If  the  conditions  of  Theorem  1.2  are  satisfied,  then  the  set  of  ail  finite-dimensional 
stabilizing  output-feedback  controllers  guaranteeing  ||T||oo  <  a  is  given  by 

(=  (^A-h  ^GG^X  -  BB'^X  _  ic)  ^  -I-  ly  +  (/  -  a-'^YX)  Bv  (1.13a) 

u  =  -B'^Xi->rV,  (1.136) 
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where  L  is  given  by  (1.10),  and  v  is  given  in  the  frequency  domain  by  t;(s)  =  Q{s)(y(s)  —  C((s)) 
with  Q(s)  being  any  finite-dimensional,  stable  transfer-function  matrix  satisfying  ||Q||oo  <  oi- 

Note  that  picking  Q(«)  =  0  results  in  the  central  control  law  of  Theorem  1.2.  It  is  possible  that 
some  controller  given  by  Theorem  1.3  may  be  of  lower  order  than  the  plant,  but  there  is  no  clear 
way  of  choosing  Q(s)  to  be  sure  to  obtain  such  a  lower-order  controller.  Further,  many  choices  of 
Q{s)  will  yield  controllers  of  order  higher  than  the  plant. 

1.2  The  Decentralized  Case 


The  Hoo  control  problem  can  be  generalized  to  the  decentralized  case,  where  the  plant  is  described 


by 


X  =  Ax  BiUi  -I-  Gwq, 

i=l 

yi  =  CiX-\-Wi,  t  €  {l,2,...,g}, 

^  Hx\ 

tti 
z  — 

\  / 


(1.14a) 

(1.146) 

(1.14c) 


The  decentralized  control  structure  consists  of  the  restriction  that  each  control  input  u,  must 
be  generated  by  an  independent  controller  which  uses  only  the  corresponding  measurement  y,-. 
This  restriction  corresponds  to  the  practical  need  in  some  situations  to  control  a  large  system  by 
means  of  several  controllers  which,  because  of  physical  separation  or  other  reasons,  cannot  exchange 
measurement  or  control  information.  The  goal  is  to  design  dynamic  controllers 


i  =  Bnyi,  i  e  {l,2,...,g},  (1.15a) 

=  ie  {l,2,...,g},  (1.156) 

which  will  stabilize  the  decentralized  plant  (1.14),  and  provide  a  predetermined  Foo-norm  bound 
for  the  closed-loop  system. 

Many  past  results  in  decentralized  control  are  concerned  with  conditions  for  existence  of  sta¬ 
bilizing  decentralized  control  laws.  Davison  reviews  some  of  these  results  in  [9].  One  important 
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result  [32]  is  based  on  the  concept  of  the  ‘^ed  inodes”  of  a  decentralized  plant.  A  decentralized 
fixed  mode  of  plant  (1.14)  is  defined  as  any  eigenvalue  of  A  which  cannot  be  moved  by  a  static 
decentralized  feedback;  that  is,  the  set  of  fixed  modes  is  defined  as 


f|  A{A  +  BKC}, 

K€D 

where  D  is  the  set  of  block-diagonal  matrices  whose  blocks  are  sized  to  conform  in  the  obvious  way 
with  the  sizes  of  the  blocks  of  B  and  C  defined  by 


B  =  (Bl  ^2  ...  Bg), 


-  (cf  cj  ...  cj) , 

and  A{*}  denotes  the  set  of  eigenvalues.  The  main  result  of  [32]  is  that  a  plamt  can  be  stabilized  by 
a  linear,  time-invariant  decentralized  control  law  if  and  only  if  it  has  no  fixed  modes  in  the  closed 
right-half  plane.  Hence,  the  concept  of  a  (decentralized)  fixed  mode  is  an  extension  of  the  concept 
of  an  uncontrollable  or  unobservable  mode  in  the  centralized  case.  An  algebraic  condition  given  in 
[1]  equivalent  with  the  presence  of  fixed  modes  in  a  strictly- proper  decentralized  plant  is  that,  for 
some  renumbering  of  control  channels,  for  some  integer  t  <  q,  and  for  some  complex  number  s. 


rank 


si -A  Bl 
Ct+i  0 


Bt 


<  n. 


0  / 


(1.16) 


If  (1.16)  holds,  then  s  is  a  fixed  mode  of  the  plant.  The  degenerate  case  t  =  0  in  (1.16)  corresponds 
to  a  plant  which  is  not  observable  by  all  the  measurements  jointly,  while  t  =  g  in  (1.16)  corresponds 
to  a  jointly  uncontrollable  plant. 

Some  other  results  give  conditions  under  which  a  decentralized  plant  can  be  made  controllable 
and  observable  through  a  single  control  channel  by  some  feedback  applied  in  the  other  channels. 
For  example,  a  main  result  of  [11],  restated  as  CoroUary  2  of  [5],  states  that  if  a  controllable  two- 
channel  plant  is  completely  observable  by  one  channel,  there  exists  some  nondynamic  feedback  in 
that  channel  which  will  make  the  plant  completely  controllable  by  the  other  channel.  That  is,  if 
(A, [Hi  H2])  is  a  controllable  pair  and  {AjCz)  is  an  observable  pair,  then  there  exists  a  constant 
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matrix  K  such  that  {A-\- B2KC2,  Bi)  is  controllable  pair.  Other  results  (for  example,  Corollary  3 
of  [5]  and  Theorem  1  of  [6])  give  more  general,  but  more  complicated,  conditions  related  to  the  zeros 
of  the  plant’s  transfer-function  matrix  and  the  connectivity  of  the  plant’s  graph.  More  recently, 
[35]  ^ves  extensions  of  the  results  of  [5]  and  [6]  to  the  multi-channel,  non-strictly-proper  case. 
Results  in  [35]  depend  on  the  concept  of  a  strongly-connected  plant.  A  decentralized  plant  with 
the  open-loop  transfer-function  matrix  P(s)  given  by 


^  yi(a) '' 

^  Pll(s)  ... 

^  «i(a)  ^ 

<  »«(«)  j 

\  •••  Pqqi^)  j 

is  defined  to  be  strongly  connected  if  for  every  renumbering  of  control  channels,  and  for  every 
integer  t  satisfying  0  <t  <  q, 


'  Pit*M 

^  Pt,t+i{s) 


7^0. 


A  main  result  of  [35]  is  that  if  a  decentralized  plant  is  strongly  connected,  and  if  it  has  no  fixed 
modes,  then  almost  any  preapplied  nondynamic  decentralized  feedback  makes  the  plant  controllable 
and  observable  in  each  control  channel. 

In  [7]  appear  necessary  and  sufficient  conditions  for  existence  of  a  solution  to  a  decentralized 
robust  servomechanism  problem.  The  key  point  of  [7]  is  that,  provided  the  outputs  to  be  regulated 
can  also  be  measured,  a  decentralized  control  which  provides  tracking  and  disturbance  rejection 
for  a  certain  class  of  reference  and  disturbance  inputs  exists  for  almost  all  plants.  For  decen¬ 
tralized  plants  composed  of  interconnected  subsystems,  [7]  and  [8]  establish  similar  facts:  If  each 
subsystem  admits  a  solution  to  a  centralized  robust  servomechanism  problem,  then  the  compos¬ 
ite  system  admits  a  solution  to  the  decentralized  robust  servomechanism  problem,  provided  the 
subsystem  interconnections  are  sufficiently  weak  or  that  the  subsystems  are  interconnected  only 
through  subsystem  inputs  and  outputs. 

There  have  been  a  number  of  approaM:hes  to  decentralized  design.  Existence  results  like  those 
of  [5]  and  [35]  suggest  a  simple  one:  Preapply  to  the  plant  a  non-dynamic  decentralized  feedback 
-  almost  any  one  will  do  -  which  will  transfer  sufficient  control  authority  to  one  control  channel 
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that  the  system  can  be  at  least  stabilized  from  there.  However,  there  is  a  great  deal  of  design 
freedom  in  this  approach,  and  no  clear  way  of  making  optimal  design  choices.  The  existence  results 
of  [7]  and  [8]  also  suggest  a  design  approach  for  decentralized  control  of  composite  systems:  Design 
a  separate  controller  for  each  subsystem,  ignoring  interconnections.  This  approach  is  depicted 
in  Figure  1.3.  While  there  are  many  good  ways  of  designing  the  subsystem  controllers,  there  is 
generally  no  guarantee  that  they  will  stabilize  the  overall  system. 

A  decentralized  design  approach  is  ^ven  in  [20]  for  so-called  multilevel  systems.  Multilevel 
systems,  some  examples  of  which  are  depicted  in  Figure  1.4,  are  composite  systems  whose  subsystem 
interconnections  are  one-way  and  loop-free.  The  approach  is  to  design  optimal  controllers  for  the 
subsystems  starting  at  the  top  level,  optimizing  each  controller  without  accounting  for  the  dynamics 
of  lower-level  subsystems.  The  inputs  from  higher-level  subsystems  are  modelled  as  disturbance 
inputs  obeying  known  dynamic  equations,  since  higher-level  subsystem  controls  are  designed  earlier. 
Thus,  the  design  method  is  sequential  in  nature.  The  resulting  design  guarantees  stability,  plus 
optimality  of  each  separate  subsystem  given  the  designs  of  higher-level  subsystem  controllers. 

Another  sequential  design  procedure  for  general  decentralized  systems  appears  in  [10].  Here, 
the  controller  is  designed  to  control  the  plant  plus  the  first  t  —  1  controllers.  That  is,  the 
controller  design  views  the  first  t  —  1  controllers  not  as  sources  of  disturbance  inputs,  but  as  part 
of  the  plant  to  be  controlled.  The  resulting  designs  guarantee  stability,  and  each  controller  can  be 
designed  to  optimize  a  cost  functional  which  depends  only  on  the  plant  and  previously-designed 
controllers. 

A  drawback  of  sequential  designs  is  that,  when  dynamic  compensators  are  used,  the  effective 
order  of  the  plant  to  be  controlled  increases  with  each  controller  added.  Many  controller  designs 
result  in  controllers  the  same  order  as  the  plant  model;  thus  it  is  easy  to  envision  a  sequential  design 
where  the  first  controller  designed  has  order  n,  the  second  has  order  2n,  the  third  has  order  4n,  and 
so  on.  To  get  around  this  problem,  some  controller  reduction  may  be  done  at  each  step  so  as  to  keep 
each  controller  at  some  fixed  order.  Once  all  the  controllers  are  designed,  they  may  be  redesigned, 
now  taking  into  account  the  presence  of  all  designed  controllers,  but  retaining  the  same  low  order. 
Hence,  such  a  design  is  both  sequential  and  iterative,  with  each  controller  refined  at  each  iteration. 
For  example,  in  the  iterative  sequential  design  in  [2],  each  controller  design  takes  into  account  the 
presence  of  previously  designed  controllers,  but  is  obtained  from  optimal  projection  equations  and 
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therefore  has  a  fixed  (low)  order.  The  design  equations  correspond  to  a  necessary  condition  for 
the  decentralized  control  law  to  minimize  a  steady-state  cost  functional  in  the  presence  of  random 
noise  inputs,  subject  to  the  a  priori  constraints  on  controller  order.  If  the  design  equations  can  be 
solved,  the  cost  associated  with  the  closed-loop  system  is  guaranteed  to  decrease  with  each  design 
iteration. 

A  nonsequential  approach  applicable  to  general  decentralized  systems  [18]  is  to  consider  the 
whole  plant  in  the  design  of  each  controller,  but  to  ignore  the  effects  of  other  controllers.  This 
approach  is  depicted  in  Figure  1.5.  Under  certain  restrictions  on  the  strength  of  plant/controlier 
interconnections,  the  controllers  acting  together  are  guaranteed  to  stabilize  the  plant.  The  restric¬ 
tions  are  technical  conditions  which  grow  out  of  a  study  of  stability  via  generalized  overlapping 
decompositions  of  the  closed-loop  system. 

1.3  Reliable  Control 

In  a  centralized  control  system,  controller  failure  leaves  the  plant  without  control  input.  This 
condition  is  undesirable,  especially  if  the  plant  is  unstable.  On  the  other  hand,  a  single  controller 
failure  in  a  decentraUzed  control  system  is  not  necessarily  catastrophic,  even  for  an  unstable  plant. 
Hence,  the  use  of  multiple  controllers  in  a  decentralized  control  design  provides  the  potential  for 
increased  system  reliability.  However,  for  existing  design  methods,  whether  or  not  a  ^ven  decen¬ 
tralized  system  is  actually  reliable  despite  possible  controller  outages  depends  upon  the  particular 
example,  and  can  be  determined  by  analysis  only  when  the  design  is  completed. 

In  [26],  Siljak  considers  the  approach  of  designing  multiple  separate  controllers,  each  of  which 
stablizes  the  plant  by  itself.  There  are  technical  restrictions  on  plant/controller  interconnections 
necessary  to  guarantee  that  ail  the  controllers  together,  or  some  subset  of  the  controllers,  also 
stabilize  the  system. 

In  [4],  Cho,  Bien,  and  Kim  consider  the  approach  of  designing  a  redundant  controller  to  operate 
in  parallel  with  a  baseline  stabilizing  controller.  The  redundant  controller  is  a  model- reference 
adaptive  controller  whose  reference  model  is  that  of  the  baseline  closed-loop  system.  For  various 
failure  modes,  the  redundant  scheme  guarantees  stabiUty  and  asymptotic  reference-tracking. 

In  [31],  Vidyasagar  establishes  some  results  on  the  reliable  stabilization  of  a  plant  by  two 
controllers  summed  together.  For  example,  ^ven  any  stabilizing  controller  for  a  plant,  [31]  gives 
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a  means  of  computing  a  second  stabilizing  controller  such  that  the  two  controllers  added  together 
also  stabilize  the  plant.  The  computation  involves  stable  coprime  factorizations  of  the  plant  and 
the  first  controller,  and  may  result  in  a  second  controller  of  high  order. 

Related  to  the  issue  of  reliable  control  is  that  of  strong  stabilization,  defined  as  the  stabilization 
of  a  plant  by  an  open-loop  stable  controller.  If  the  input  of  a  strongly  stabilizing  controller  becomes 
disconnected  from  the  plant  output,  at  least  the  controller  will  not  apply  unwanted  large  inputs  to 
the  plant.  The  so-called  "pole-zero  interlacing  property”  given  in  [31]  is  a  well-known  necessary  and 
sufficient  condition  for  the  existence  of  a  strongly  stabilizing  controller.  As  with  existing  reliable 
designs,  strong  stability  results  are  madnly  concerned  that  the  system  simply  remmn  stable  despite 
a  controller  failure. 

1.4  Contribution  of  This  Thesis 

This  thesis  presents  a  new  method  for  designing  decentralized  control  systems  to  accomplish 
a  variety  of  design  goals.  The  basic  design  method  produces  a  decentralized  control  law  which 
guarantees  closed-loop  stability  and  a  worst-case  (Hoo)  disturbance-attenuation  bound  when  applied 
to  the  plant  (1.14).  The  control  law  consists  of  a  full-order  observer  in  each  control  channel.  Like 
the  centralized  controller  (1.9),  each  observer  uses  an  estimate  such  as  that  given  in  (1.12)  to 
approximate  the  disturbance  wq.  In  addition,  each  observer  uses  estimates  of  the  controls  applied 
in  the  other  channels.  These  estimates  correspond  to  the  strategy  shared  by  the  controllers  for 
approximating  the  state-feedback  control  law  given  by  (1.5)  and  (1.6). 

The  decentralized  control  law  uses  the  state- feedback  gains  computed  from  (1.5)  for  feedback 
of  the  state  estimates,  and  observer  gains  computed  from  a  single  Riccati-like  design  equation; 
hence,  the  controllers  are  designed  all  together,  rather  than  sequentially.  Since  each  controller  is 
based  on  a  full-order  observer  of  the  plant,  each  has  the  same  order  as  the  plant.  The  existence  of 
appropriate  solutions  to  the  design  equations  is  sufficient  to  guarantee  the  stability  and  performance 
of  the  closed-loop  system  under  the  decentralized  control  law.  No  other  condition  on  the  subsystem 
interconnections  or  the  plant/controller  interconnections  is  needed.  Of  course,  the  design  equations 
will  have  no  solution  if  the  plant  has  any  unstable  fixed  modes. 

Variations  on  the  design  equations  allow  the  design  of  robust,  reliable,  or  strongly-stabilizing 
decentralized  control  laws.  Each  design  guarantees  stability  and  a  predetermined  degree  of  distur- 
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bance  attenuation.  In  addition,  the  robust  design  can  tolerate  constant  plant  uncertainties  from  a 
given  bounded  set;  the  reliable  design  can  tolerate  outages  of  any  or  all  controllers  in  a  predefined 
subset  of  controllers;  and  the  strongly  stabilizing  design  guarantees  that  all  controllers  from  some 
predefined  subset  will  be  open-loop  stable.  A  centralized  reliable  design  is  also  developed  which 
can  tolerate  outages  of  some  sensors  or  actuators. 

The  various  robust,  reliable,  and  strongly  stabilizing  designs  developed  can  be  combined  into  a 
design  which  will  guarantee  any  or  all  of  the  desired  properties  at  once. 

Finally,  a  convexity  property  of  the  matrix  Riccati  function 

R{X)  =  F'^X  +  XF+-^XGG'^X  +  H^H,  (1.17) 

with  F  Hurwitz,  allows  easy  computation  of  families  of  matrices  Z  >  0  satisfying  R{Z)  <  0,  and 
hence,  families  of  decentralized  control  laws  with  any  of  the  desired  properties.  For  any  control  law 
in  the  family,  the  decentralized  controllers  all  have  the  same  order  as  the  plant. 

Chapter  2  describes  the  approach  taken  to  developing  new  decentralized  control  laws.  The  main 
result  of  Chapter  2  is  Lemma  2.1,  which  is  the  basis  for  all  the  designs  which  follow.  The  result 
consists  of  a  sufficient  condition  in  the  form  of  an  algebraic  Riccati  inequality 

R{X)  =  F^X  +  XF  +  ^XGG'^X  +  H'^H  <  0  (1.18) 

a* 

which  guarantees  the  ^oo*norm  bound  ||r(|oo  <  a  for  the  transfer-function  matrix 

T(s)  =  ff(sl  -  F)-^G. 

Based  on  Lemma  2.1,  simple  new  derivations  of  the  control  laws  of  Theorems  1.1  and  1.2  are  given. 
These  derivations  give  insight  into  the  decentralized  designs  presented  in  the  following  chapters. 

Chapter  3  presents  the  basic  decentralized  control  design,  which  is  characterized  by  closed- 
loop  stability  and  a  predetermined  degree  of  worst-case  disturbance  attenuation.  The  basic  design 
results  in  a  closed-loop  system  which  satisfies  (1.18)  with  equality  holding.  Two  examples  follow 
the  derivation. 

Chapter  4  presents  a  decentralized  design  which  has  the  properties  of  the  basic  design,  and 
is  also  robust  with  respect  to  structured  uncertainty  in  the  plant.  The  robust  design  results  in  a 
closed- loop  system  whose  matrices  satisfy  (1.18)  for  any  plant  uncertainty  in  a  bounded  admissible 
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set.  Following  the  derivation  is  a  robust  state-feedback  design  example.  This  example  illustrates 
the  concept  of  robust  design,  while  avoiding  the  complicating  details  of  decentralized  design. 

Chapter  5  presents  new  results  on  reliable  control.  Similar  to  the  robust  design,  the  reliable 
design  method  results  in  a  closed-loop  system  which  satisfies  (1.18)  for  any  admissible  controller 
failures.  The  design  method  is  first  developed  in  the  centralized  case,  where  reliability  is  guaran¬ 
teed  despite  possible  outages  of  some  sensors  or  actuators.  Then,  a  decentralized  design  method  is 
derived  which  guaratees  reliability  with  respect  to  possible  controller  outages.  An  example  demon¬ 
strates  that  the  resulting  reliable  decentralized  design  can  tderate  controller  outages  which  would 
cause  instability  for  the  basic  design.  A  new  design  method  is  also  presented  which  guarantees  that 
the  controller,  or  some  prespecified  subset  of  controllers  in  the  decentralized  case,  will  be  open-loop 
stable. 

Chapter  6  presents  the  properties  of  the  matrix  Riccati  function  R(X)  which  allow  computation 
of  families  of  decentralized  control  laws  with  desired  disturbance-attenuation,  robustness,  reliability, 
or  strong  stabilization  properties.  A  family  of  state-feedback  designs  is  presented  first.  Then  it  is 
shown  that  a  family  of  centralized  observers  with  the  desired  properties  can  be  computed  for  each 
member  of  the  family  of  state-feedback  controls.  In  the  decentralized  case,  however,  only  one  set 
of  decentralized  observer  gains  can  be  computed  for  each  state-feedback  control,  yielding  a  family 
of  decentralized  control  laws  corresponding  exactly  with  the  family  of  state-feedback  control  laws. 
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Figure  1.1:  The  standard  Hoo  problem  setup. 


(a)  A  frequency-weighted  disturbance-rejection  problem. 


(b)  A  model-reference  problem. 


(c)  A  tracking  problem. 

Figure  1.2:  Reformulation  of  familiar  problems  to  fit  the  standard  form. 


Figure  1.6:  Decentralized  controller  design  ignoring  other  controllers. 


Chapter  2 


The  Approach 

2.1  The  Key  Lemma 

The  following  lemma  establishes  a  sufficient  condition,  in  the  form  of  an  ‘^algebraic  Riccati 
inequality,”  for  a  given  system  to  be  stable  and  have  a  particular  ^oo-norm  bound.  The  lemma  is 
a  simple  extension  of  Lemma  1  of  [34], 

Lemma  2.1.  Let  T(s)  s  E(sl  -  F)~^G,  with  {F,H)  a  detectable  pair.  If  there  exist  a  real  matrix 
X  >0  and  a  positive  scalar  a  such  that 

F^X  +  XF  +  -^XGG^X  +  <  0,  (2.1) 

.a* 

then  F  is  Hurwitz,  and  T(s)  satisfies 

liriloo  <  a.  (2.2) 

Piroof.  Suppose  (2.1)  holds,  with  A*  >  0.  To  show  that  F  is  Hurwitz,  let  v  ^  0  satisfy 

Fv  =  Xv. 

Multiply  (2.1)  on  the  left  by  v*  and  on  the  right  by  v  to  obtain 

2Re{X)v*Xv  +  ^v^XGG'^Xv  +  v‘H^Hv  <  0.  (2.3) 

Now,  2Re{X)v*Xv  <  0  since  all  other  terms  on  the  left-hand  side  of  (2.3)  are  non-negative.  If 
Re{X)v"Xv  <  0,  then  v*Xv  >  0  and  iie(A)  <  0.  If,  on  the  other  hand,  Re(A)t;*Av  =  0,  then  all 
terms  in  (2.3)  must  be  zero.  Therefore,  the  eigenvector  v  of  /'  is  in  the  null  space  of  H.  Since 
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{F,  H)  is  detectable,  the  corresponding  eigenvalue  must  be  in  the  open  left-half  plane.  In  either 
case,  iZe(A)  <  0;  thus,  F  is  Hurwitz. 

Now,  to  prove  (2.2),  let  u  ^  M;  add  and  subtract  juX  to  obtain  from  (2.1) 

-  F^)X  -  X{jul  -  f)  +  ^XGG'^X  +  <  0.  (2.4) 

Since  F  is  Hurwitz,  (jw/  -  F)  is  invertible.  Define 

KUi^)  =  -^G^XUuI  -  Fr^G; 
or 

pre-multiply  (2.4)  by  -  F^)“^,  and  post- multiply  by  -  F)~^G  to  obtain 

-K{ju)  -  K'^(-ju)  -I-  K'^{-ju)K{ju)  -h  ±r^(-iu,)r(ja;)  <  0, 

which  gives 

/  -  ±r^(-iu;)r(j<u)  >  [/  -  K^i-ju;)][I  -  K{ju)]. 

Therefore,  for  all  u;  €  FI, 

I  -  ^r(iu)r(ju,)  >  [/  -  Jf(iu.)n/  -  KU^)]  >  0, 
which  implies  (2.2).  Q.E.D. 

2.2  The  General  Approach 

Lemma  2.1  suggests  a  particular  view  of  the  Hoo  control  designs  of  Theorems  1.1  and  1.2,  along 
with  a  new  approach  to  decentralized  Hex,  design.  The  approach  is  to  first  hx  a  controller  structure, 
so  as  to  determine  the  form  of  the  closed-loop  system 


ie  =  FgXe  -I-  GetVe,  Z  =  HeXe,  (2.5) 

and  then  select  controller  gains  so  that,  for  some  Pe  >  0,  the  algebraic  Riccati  equation 

Fj"  Xe  +  XeFe  +  ^X^GeGj  Xe  +  HJ  He  +  Pe  =  0  (2.6) 

has  a  solution  Xe  >  0.  By  Lemma  2.1,  if  (Fe,He)  is  a  detectable  pair,  then  the  closed-loop  system 
(2.5)  is  stable,  and  T{s)  s  He{sl  -  Fe)~^Ge  satisfies  ||ri|oo  <  a. 
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In  the  designs  of  Theorems  1.1  and  1.2,  controller  parameters  are  chosen  to  depend  on  solutions 
of  the  design  equations  (1.5)  and  (1.7),  so  that  a  solution  Xe  >  0  of  (2.6)  is  guaranteed  to  exist, 
with  Pe  =  0.  In  Chapter  3,  this  same  approach  is  applied  to  decentralized  control.  To  guarantee 
that  (2.6)  is  satisfied,  the  observer  gains  are  computed  from  the  solution  of  a  Riccati-like  algebraic 
equation. 

Choosing  Pg  =  0  in  (2.6)  yields  what  we  shall  call  the  “basic  design,”  characterized  by  stability 
and  the  Poo-norm  bound  ||T||oo  <  a*  Choosing  some  other  Pg  >  0  allows  greater  design  freedom 
to  obtain  “special  designs”  with  additional  desired  properties.  Specifically,  particular  choices  of 
Pg  >  0  are  used  in  this  thesis  to  guarantee  the  following  additional  properties: 

(i)  Robustness  with  respect  to  constant  structured  uncertainty  in  the  plant  .4-matrix,  when  the 

uncertainty  belongs  to  a  predetermined  bounded  set; 

(ii)  Reliability  with  respect  to  controller  outages,  where  outages  may  occur  in  any  or  all  of  the 
controllers  in  a  predefined  subset  of  controllers; 

(iii)  Strong  stabilization,  in  the  sense  that  all  controllers  in  a  predefined  subset  of  controllers  will 
be  guaranteed  open-loop  stable. 

2.3  The  Approach  Applied  to  Centralized  Control 

To  provide  insight  into  the  approach  to  decentralized  design  described  above,  a  new  derivation 
of  the  control  law  of  Theorem  1.2  is  now  given,  based  on  Lemma  2.1.  This  derivation,  which  also 
appears  in  [29],  is  not  a  complete  proof  of  Theorem  1.2,  in  that  it  establishes  only  that  the  design 
is  sufficient  to  guarantee  a  predetermined  P’oo-norm  bound,  and  not  that  any  achievable  bound  can 
be  obtained  using  such  a  design.  For  this  reason,  not  all  the  conditions  appearing  in  Theorem  1.2 
are  needed. 

The  problem  here  is  to  derive  control  laws  to  stabilize  the  plant  (1.3)  and  provide  an  /foo-norm 
bound  for  the  closed-loop  transfer  function  matrix  from  the  disturbance  Wg  =  ('^)  to  z.  By  Lemma 
2.1,  a  sufficient  condition  for  a  state-feedback  control  ri=  Kx  to  stabilize  the  plant  and  guarantee 
the  Hoo-^orm  bound  ||T||oo  <  a  is  that  the  feedback  gain  matrix  K  satisfy 

{A  +  BKfX  +  XiA  +  BK)  -I-  ^XGG^X  -I-  (17^  K'^)  f  =  0  (2.7) 
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with  A”  >  0.  Rearrange  (2.7)  as 

A^X  +  XA  +  —XGG^X  -  XBB^X  +  {K'^  +  XB){K  +  B'^X)  +  H  =  0.  (2.8) 

a* 

Setting  K  =  —B^X  in  (2.8)  gives  the  state-feedback  design  equation  (1.5).  By  Lemma  2.1,  if 
A"  >  0  solves  (2.7),  the  control  law  (1.6)  results  in  a  closed-loop  system  with  an  Hoo-norm  bound  of 
a.  (Note  that  the  detectability  condition  of  Lemma  2.1  is  satisfied  if  {A,H)  is  a  detectable  pair.) 

In  the  output-feedback  case,  an  observer- based  control  law  will  be  used  to  approximate  a  state- 
feedback  control  u  =  Kx.  To  mimic  the  dynamics  of  the  plant  (1.3),  the  observer  takes  the  form 

i  =  A^  + Bu  +  Gwo  + L{y  -  C^),  u=K^,  (2.9a) 

where  a  state-feedback  model  of  the  disturbance  wo  is  assumed  as 

wo  =  Kd^.  (2.96) 


The  feedback  gain  K,  observer  gain  L,  and  disturbance-estimate  gain  Kd  will  be  chosen  so  that, 
when  controller  (2.9)  is  applied  to  the  plant  (1.3),  the  closed-loop  system  will  satisfy  the  hypotheses 
of  Lemma  2.1. 

Introduce  the  error  vector  e  =  |  -  x,  and  write  the  closed-loop  system  as 


A-\-BK 

GKd 


Xe  +  GelTe, 


(2.10a) 


X  = 


=  H^Xe. 


H  0 
K  K 

Similar  to  the  state-feedback  case,  the  goal  is  to  find  Ae  >  0  such  that 


FjX,  X,F,  -H  -jAeGeGfAe  -h  HJH,  = 

®  >00 


(2.106) 


(2.11) 


To  ensure  decoupling  of  (2.11)  into  a  state- feedback  design  ARE  and  an  observer  design  equation, 
look  for  a  block-diagonal  solution 


A  0 
0  Ai 


>  0. 
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Then,  the  upper-left  block  of  (2.11)  is  exactly  Equation  (2.7).  If,  as  in  the  state-feedback  solution, 
X  >  0  solves  (1.5)  and  the  feedback  gain  is  jpven  by 

K  =  (2.12) 


then  the  upper-left  block  of  (2.11)  is  satisfied.  The  upper-right  block  of  (2.11)  then  gives 
-XBB^X  +  kJ G^Xi  -  -^XGG^Xi  +  XBB^X  =  0, 


which  is  satisfied  if 


K,  =  ±a^x. 


Given  the  choices  (2.12)  and  (2.13),  the  lower-right  block  of  (2.11)  gives 

Xi{A  +  a-^GG^X-LC)  +  {A  + a-^GG'^X  ~  LC)'^Xi 

+  iiXiiGG'^  -I-  LL^)Xi  +  XBB'^X  =  0. 
Add  to  (2.14)  the  design  equation  (1.5)  to  obtain  the  ARE 

{X  +  Xi)A  -H  A'^{X  +  Xi)  +  -^iX  +  Xi)GG'^{X  +  Xi)-a^C^C  +  HT'H 
+  (iXiI  -  aC^)  -  aC)  =  0, 

which  suggests  the  choice  for  the  observer  gain  L  as 

XiL  =  a^C^. 


(2.13) 


(2.14) 


(2.15) 


(2.16) 


In  order  that  L  satisfying  (2.16)  is  guaranteed  to  exist,  impose  the  restriction  X\  >  0.  Now 
introduce 

y  =  a^(A'-|-A’i)-^  >0  (2.17) 

to  transform  (2.15)  into  the  design  ARE  (1.7).  A  solution  T  >  0  of  (1.7),  with  a^Y~^  >  X, 
guarantees  A'e  >  0  solves  (2.11)  when  gains  A',  Kd-,  and  L  are  computed  from  (2.12),  (2.13),  and 
(2.16).  Hence,  by  Lemma  2.1  the  closed-loop  transfer-function  matrix  T{s)  =  Ht{sl  -  Fe)~^Ge 
satisfies  ||r||oo  <  «,  provided  (Fe,He)  is  a  detectable  pair. 

The  needed  detectability  condition  is  satisfied  if  iA,H)  is  a  detectable  pair  and  =  A  -|- 
a~^GG^X  -  BB^X  is  Hurwitz.  To  see  this,  let  =  {vf  v^)  satisfy 

A  -  BB^X  -BB'^X 

a-'^GG'^X  A  -f-  a-^GG'^X  -  LC 


F.v  = 


(2.18) 
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(2.19) 


B^X  -B'^X  j  \^J 

and  try  to  show  that  i2e(A)  <  0.  The  upper  half  of  (2.18)  and  the  lower  half  of  (2.19)  ^ve 
Avi  =  At;i,  while  the  upper  part  of  (2.19)  gives  Hvx  =  0.  Since  iA,H)  is  assumed  a  detectable 
pair,  this  implies  either  Re{X)  <  0  or  vi  =  0.  Suppose  vi  =  0;  then  the  lower  half  of  (2.18)  gives 

(a  +  -^GG^X  -  LC^  V2  =  Xv2.  (2.20) 

Therefore,  pre-multiplying  (2.14)  by  and  post-multiplying  by  V2,  and  using  (2.16),  gives 

2/ie(A)t;5Xit;2  +  ^v^XiGG'^  X1V2  +  a^v;C'^Cv2  +  v;XBB^Xv2  =  0.  (2.21) 

Since  every  term  but  the  first  in  (2.21)  is  nonnegative,  the  first  term  gives 

Re{X)v^XiV2  <  0.  (2.22) 

If  inequality  holds  in  (2.22),  then  i2e(A)  <  0.  If  equality  holds  in  (2.22),  then  every  term  in  (2.21) 
is  zero.  Hence,  Cv2  —  0  and  B'^Xv2  —  0,  and  thus  (2.20)  gives 

{a  +  a-^GG'^X  -  BB^X)  vj  =  Auj. 

By  assumption,  A  -f  a~^GG^X  —  BB^X  is  Hurwitz;  therefore,  i2c(A)  <  0. 

The  following  theorem  summarizes  the  result. 

Theorem  2.1.  Suppose  (i4,  ff)  is  a  detectable  pair,  X  >  0  satisfies  the  state-feedback  design  ARE 
(1.5)  with  Aq  =  A  +  a~^GG^X  —  BB^X  Hurwitz,  and  Y  >  0  satisfies  the  observer  design  ARE 
(1.7)  with  H  the  observer  gain  is  given  by 

L  =  (I-  c,-^YX)-^YC^,  (2.23) 

then  the  dynamic  controller 

^=^>1-1-  ^GG'^X  -  BB'^X  -LC^^  +  Ly  (2.24) 

«  =  -B^X^  (2.25) 

stabilizes  the  plant  (1.3),  and  the  closed-loop  transfer-function  matrix  T(s)  =  He(sl  -  Fe)~^Ge 
satisfies  l|T||oo  <  o- 
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2.4  The  Approach  to  Computing  Families  of  Controllers 

Lemma  2.1  provides  not  only  a  new  way  of  designing  control  laws  which  guarantee  stability 
and  an  ^oo-norm  bound,  but  also  a  method  of  characterizing  families  of  such  controllers.  Such 
a  characterization  is  based  on  the  following  convexity  property  of  the  matrix  Riccati  function  R 
defined  in  (1.17);  If  there  are  several  matrices  JTj  >  0  which  satisfy  the  ARE  R(X,)  =  0,  then  any 
convex  combination  Z  of  the  .Yi’s  satisfies  R(Z)  <  0.  This  fact  allows  easy  computation  of  a  family 
of  matrices  Z  >  0  satisfying 

A^Z  ■^■ZA  +  -^ZGG^Z  -  ZBB^Z  +  ff^JI  <  0. 

For  any  such  Z,  it  is  shown  that  the  state-feedback  control  u  =  —B^Zx  provides  stability  and  the 
Hoc-uotm  bound  ||T||oo  < 

Any  member  of  the  family  of  state-feedback  controls  can  be  used  as  a  reference  for  centralized 
or  decentralized  observer-based  controls.  In  the  centralized  case,  the  convexity  property  of  the 
dual-form  Riccati  function  associated  with  observer  design  also  permits  computation  of  a  family  of 
observer  gain  matrices.  In  the  decentralized  case,  however,  the  Riccati-like  design  equation  does 
not  allow  this  freedom.  As  a  result,  the  freedom  in  computing  the  family  of  decentralized  control 
laws  is  just  that  freedom  avsulable  in  computing  the  family  of  state- feedback  control  laws. 

The  remainder  of  the  thesis  develops  the  various  new  control  design  methods  based  on  Lemma 
2.1,  starting  with  the  basic  decentralized  design,  and  proceeding  to  robust  and  reliable  designs,  and 
finally  to  families  of  designs,  all  guaranteeing  predetermined  levels  of  worst-case  {Hoo)  disturbance 
attenuation. 
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Chapter  3 


The  Basic  Decentralized  Control 
Design 


The  same  approach  applied  to  the  centralized  control  problem  in  Section  2.3  is  now  applied  to 
the  decentralized  problem.  The  design  derived  here  also  appears  in  [30]. 

3.1  Design  Derivation 


Consider  the  plant  (1.14)  with  {A^H)  a  detectable  pair.  For  convenience,  adopt  the  following 
notation: 


isl 


«2 


=  Bu, 


(3.1a) 


y  = 


^  yt  ^ 

^  Cl  ^ 

frvA 

yi 

C2 

W2 

; 

• 

: 

X  + 

\  y<i  J 

<  ^9  y 

1 

=  Cx  +  w, 


(3.16) 
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^  Wo  ^ 

tWe  = 

Wi 

■W- 

(3.1c) 

[  J 

Si  =  BiBf,  »€  {l,2,...,g}. 

(3.1d) 

S  =  Si  +  S]  +  . . 

.■hS,  =  BB^. 

(3.1e) 

The  problem  is  to  design  a  controller  for  each  of  the  q  control  channels,  where  the  controller 
uses  the  local  measurement  y,-  to  generate  the  local  control  tt,-  for  the  plant. 

The  basic  decentralized  control  law  to  be  developed  stabilizes  the  plant  and  provides  a  predeter¬ 
mined  Hoo-vmtvo.  bound  for  the  closed-loop  transfer-function  matrix  from  We  to  z.  The  controllers 
which  make  up  the  control  law  are  based  on  observers  which  form  estimates  t  E  {1,2, .. .  ,9}, 
of  the  state  x  for  feedback.  The  state  estimates  are  used  for  feedback  so  as  to  approximate  the 
state-feedback  control 

«  =  —B^Xxy  (3.2) 

where  X  >0  satisfies  the  ARE 

A^X  +  XA  +  -^XGG^X  -  XSX  +  =  0.  (3.3) 

That  is,  the  i***  control  is  ^ven  by 

tt.-  =  -BfX^i,  (3.4) 

which  approximates  a  subvector  of  the  state-feedback  control  (3.2).  To  mimic  the  plant  dynamics 
(1.14a),  the  observer  should  ideally  have  the  form 

<1 

ii  =  A^i  +  ^  BjUj  -I-  Gwo  Li{yi  -  Ci^i),  (3.5) 

j=i 

where  Li  is  some  observer  gain  matrix.  However,  since  the  disturbance  u;o  and  the  controls  Uj, 
j  ^  t,  are  not  available  to  the  observer,  (3.5)  cannot  be  implemented  directly.  Just  as  the  centralized 
observer  (1.11)  uses  (1.12)  as  an  estimate  of  the  worst  disturbance,  the  decentralized  observer 
replaces  wq  in  (3.5)  by 

=  ^G'^X(i.  (3.6) 
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The  i***  observer  also  replaces  uj,  j  ^  i,  by 


(3.7) 


which  are  approximations,  based  on  the  state  estimate  of  the  controller,  of  the  controls  applied 
by  the  other  controllers  according  to  their  shared  strategy.  With  the  control  (3.4),  the  observer 
structure  (3.5),  and  estimates  (3.6)  and  (3.7),  the  controller  becomes 


t  =  (a  +  ^GG'^X  -SX-  LiC^  +  LiVi 
Ui  =  -BjXii, 


(3.8a) 

(3.85) 


where  the  observer  gains  Li,  t  €  {1,2,...,  9},  are  to  be  determined. 

Applying  the  q  controllers  (3.8)  to  the  plant  (1.14)  gives  a  closed-loop  system  of  order  (9-h  l)n 
described  by 


A  -BBfX,  )  (iV  (  G 
L^C  A..  -  I.C.  )\()  (0 


-|-  GeVfe 


(3.9a) 


where  f  ...  ?^),  and 


(3.95) 


For  convenience,  define  also 


Aac  —  Diag  (Aq,  Aa, . .  • ,  Ao) 

(3.10a) 

Aa  =  A  +  \gg'^X  -  SX, 

(3.105) 

Be  —  Diag  (5i,  B2, ...» Bq), 

(3.10c) 

Ce  —  Diag  (CijCj, . . . ,C7g), 

(3.10d) 

Lc  —  Diag  (ij, L2, . •  •  ,Lq), 

(3.10e) 

Ac  =  Diag  {X,X:,..,X). 

(3.10/) 

Ij  =  [//  ... 

(3.105) 

II 

V 

(3.105) 
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Ac-  Aac-^IcBBjXc.  (3.10i) 

Then,  transfonning  coordinates  of  (3.9)  such  that  the  last  qn  state  variables  are  the  errors  e,  = 
ii-x,  i  €  {1,2,...,  g},  gives 

ie  =  f'tXe  +  ^  =  ^eie, 


where 


A-SX  -BBjXc 


Fc  =  MZ^FcMc  =  =  M:^Gc  =  ,  (3.11a) 

I  q-^GcG^X  Ac  -  LcCc  I  I  -Gc  Lc  I 


G  0 


H  0  \  /  0 

He  =  HcMc  =  ^  ^  ,  Me  = 

\-B^X  -BjXcj  \lc  I 

The  existence  of  a  (g  +  l)n  x  (g  +  l)n  matrix  Xe  >  0  satisfying 

FJXc  +  XcFc  +  \XcGcGIXc  +  J7e  =  0 


(3.116) 


(3.12) 


will  by  Lemma  2.1  guarantee  stability  and  an  ifoo-norm  bound  for  the  closed-loop  system  (3.9). 


Assume  the  form 


Xe  = 


X  0 

0  Xi 


(3.13) 


with  X  >  0  solving  (3.3)  and  Xj  >  0  undetermined,  and  decompose  the  left-hand  side  of  (3.12) 
into  appropriately  sized  blocks  as 


FJXc  +  XeFe  +  \Xc6cGlXc  +  He  = 


Ui2 

U^2  U22 


(3.14) 


Then,  it  turns  out  that  the  off-diagonal  block  U12  is  identically  zero,  and  that  (3.3)  gives  Un  =0. 
Hence,  independent  of  Lc  and  Xi,  (3.14)  becomes 

PJXc  +  Xe/e  +  ^Jic^eClJ Xc HJ He  =  ^  ^  ^  , 

®  y  0  U22  j 


U27  =  {Ac  —  LeCe)^Xi  -f  Xi(Ac  -  LeCe)  +  -^Xi(GcGf  +  LeL^)X\  -h  XcBcBJXc 
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Defining  W  =  ,  this  reduces  to 


U22  =  ^Xi{WAj  +  AcW-i.jjWXcBcBjXcW-WCjCcW 
+  GcGj  +  iLc-WCj)iLj  -CcW)}Xi. 


(3.15) 


It  is  now  possible  to  pick  Xi  (or,  equivalently,  W)  and  Le  such  that  U22  =  While  it  is  logical 
in  view  of  Lemma  2.1  to  try  to  eliminate  the  last  term  in  (3.15),  this  is  not  generally  possible, 
since  Le  must  be  block-diagonal.  Thus,  Le  is  chosen  to  eliminate  the  n  x  n  main-diagonal  blocks 
of  Le  -  WCj.  This  requires 

Le  =  WdCJ,  (3.16) 


where  Wd  is  given  by 


W  = 


or 


^  Wn 

Wi2 

...  Wi,  ^ 

W21 

W22 

...  W2, 

,  Wo  =  Diag  (Wxx,W22 . w„). 

W,2 

.  .  .  Wqq  j 

L 

i  =  WiiCh 

i  6  {1,2,...,?}. 

(3.17) 

Then,  (3.15)  becomes 

U22  =  ^Xx{WA'^  +  AeW-\-AjWXeBeBjXeW-WCjCeW-\-GeG'l 
+  {W -WD)CjCe{W  ~Wd)}Xx. 

Therefore,  if  W  >  0  satisfies  the  Riccati-like  algebraic  equation 

WAl  AeW  -I-  ^WXeBeB'^XeW  -  WCjCeW 
+Ge(^  +  {W-  WD)CjCe{W  -  Wd)  =  0, 


(3.18) 


(3.19) 


then  U22  =  0,  and  (3.12)  is  satisfied.  Since  W  >  0  is  required,  Xe  >  0  holds  automatically; 
therefore,  provided  (Pet  Be)  is  a  detectable  pair.  Lemma  2.1  gurantees  that  Fe  is  Hurwitz  and  that 
T{s)  =  —  Pe)~^^e  Satisfies  ||ri|oo  <  o.  The  following  lemma  establishes  the  detectability 

condition. 

Lemma  3.1.  Given  the  definitions  (3.10)  and  (3.11),  where  X  >  0  satisfies  (3.3),  W  >  0  satisfies 
(3.19),  and  Le  satisfies  (3.16),  the  pair  (Fe,Be)  is  detectable  under  the  following  three  conditions: 
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(i)  (A,ff)  is  a  detectable  pair; 

(ii)  AasA  +  a-'^GCf^X  -  SX  is  Hurwitz; 

(iii)  Aa  +  SX  has  no  eigenvalues  on  the  ju-axis. 


Proof.  Suppose  A  is  an  eigenvalue  of  /*«  corresponding  to  an  unobservable  mode  of  (Fe,  Re);  that 
is,  some  =  (uf  vj)  /  0  satisfies 


and 


(  A-BB'^X  -BBjXe  \ 

\  a-'^GcC^X  Ae  -  LcCe  )  \^/ 


HeV  = 


'  “  lh=o 

-B^x  -BjXc )  vy 


(3.20) 


■  (3.21) 


The  proof  now  consists  of  showing  that  iZe(A)  <  0. 

The  lower  block  of  (3.21)  and  the  upper  block  of  (3.20)  combine  to  give  Avi  =  Avi ,  while  the 
upper  block  of  (3.21)  gives  Hvi  s  0.  Since  {A,H)  is  assumed  a  detectable  pair,  this  implies  that 
either  .Re(A)  <  0  or  ui  =  0.  If  =  0,  then  the  lower  block  of  (3.20)  gives 


(^c  BeGe)V2  *  Avj. 


(3.22) 


The  detectability  proof  is  completed  by  showing  that  Ac  —  LgCe  is  Hurwitz.  The  bracketed  expres¬ 
sion  in  (3.15)  is  equal  to  zero;  therefore 

{Ac  -  LcCe)W  +  W{Ac  -  LcCc)'^  -b  ^WXcBcBJXcW  +  GcG'^  +  LcL"^  =  0.  (3.23) 

Let  q*  be  a  left-eigenvector  of  Ac  -  LeCe  corresponding  to  the  eigenvalue  A.  Multiply  (3.23)  on  the 
left  by  rf*  and  on  the  right  by  rj  to  obtain 

2Re(X)rfWri  +  ^rfWXcBcB'^XcWr}  -I-  rfGcGl rj  +  rfLcL^ q  =  0.  (3.24) 

Since  every  other  term  in  (3.24)  is  nonnegative,  i?e(A)q*Wq  <  0,  with  ly  >  0  assumed;  therefore, 
Re{\)  <  0.  The  following  argument  demonstrates  that  Re(X)  /  0.  If  Re(X)  =  0,  then  every 
term  in  (3.24)  must  be  zero;  hence,  q'lc  =  0*  Then  A  is  an  eigenvalue  of  Ac.  But  a  similarity 
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transformation  on  Ac  reveals  that  it  can  have  no  imaginary  eigenvalues:  If 


Af  = 


/ 

-/  / 

•  •  •  ^ 

-/  0  ...  / 


then 


M-'AcM  = 


(  Aa  +  SX  SiX  ...  S,X  \ 
Ac  .. 


7,- 

0 


\  Ac.  J 

where  Ag  is  assumed  Hurwitz,  and  Ac  +  SX  is  assumed  to  have  no  imaginary  eigenvalues.  Q.E.D. 


Under  the  conditions  of  Lemma  3.1,  Fc  is  Hurwitz  by  Lemma  2.1.  Therefore,  Fc  is  also  Hurwitz, 
and  the  closed-loop  transfer-function  matrix  r(s)  =  Hc{sl  —  Fe)~^Ge  =  He(sl  —  Fe)~^Ge  from  Wg 
to  z  satisfies  ||T||oo  <  a.  Condition  (iii)  of  Lemma  3.1  is  a  new  technical  condition  which  must  be 
introduced  for  the  decentralized  control  problem. 

The  following  theorem  summarizes  the  result: 

Theorem  3.1.  Let  (A,  H)  be  a  detectable  pair  and  a  be  a  positive  scalar.  Suppose  X  >0  satisfies 

A^X  +  XA  +  ^XGG'^X  -  XSX  -I-  =  0,  (3.3) 

Ac  =  A-\-q~'^GG^ X  —  SX  is  Hurwitz,  and  Aa  +  SX  has  noju-axis  eigenvalues.  Let  ly  >  0  satisfy 
the  Riccati-like  algebraic  equation 

WAj  +  AcW +  -^WXcBcBjXcW -WCjCcW 
A  GcGj  +  iW-  Wd)C^Cc{W  -  Wd)  =  0. 

If  the  observer  gains  L,,  *6  {1,2,...,  9},  are  given  by 

Li  =  WiiCT, 

then  the  decentralized  feedback  control  law 

ii=  -  SX  -  LiC^  ^i  +  Liyi,  *  €  {1, 2, . . . ,  g}. 


(3.19) 


(3.17) 

(3.8a) 
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Uj  —  i  €  {1(2, . . . ,  9}, 


(3.86) 


stabilizes  the  plant  (1.14),  and  the  closed-loop  transfer-function  matrix 

T{S)=  He{sI-Fe)-^Ge 
from  We  to  z  (with  Fe,  Ge,  and  He  defined  in  (3.9))  satisfies 

liriloo  <  a. 

3.2  Example  1 

Consider  the  plant  (1.14)  with  q  =  2  and 


^  -2 

1 

1 

1> 

1^0^ 

fo\ 

f  0 

3 

0 

0 

2 

1 

0 

0 

A  = 

5i  = 

^2  = 

G  = 

-1 

0 

-2 

-3 

0 

0 

1 

<-2 

-1 

2 

^  1  > 

.0/ 

Cl  =  [1  0  0  0]  Cj  =  (0  0 1 0]  /r  =  [1 0  - 1 0]. 

The  spectrum  of  A  is  {*-2.56,-1.32  ±  j2.92,  -f-O.lQ};  hence,  the  plant  has  an  unstable  mode. 

To  compute  a  decentralized  control  for  this  plant,  first  form  the  coefficients  of  (3.19)  from 
the  plant  matrices  and  the  state-feedback  design  equation  solution.  Then,  solve  (3.19)  by  an 
iterative  method:  Compute  an  approximate  solution  Wo  by  ignoring  the  complicating  term  Q  = 
(W  —  Wd)CJ Cc(W  -  Wd).  Then  use  Wo  to  compute  an  approximation  of  Qo  of  Q,  and  use  Qo 
in  the  obvious  way  to  compute  the  next  approximate  solution  Wi  •  Iterate  this  procedure  until  the 
candidate  solution  Wi  makes  the  matrix  norm  of  left-hand  side  of  (3.19)  less  than  some  acceptable 
tolerance;  then  take  Wi  as  the  solution  W  of  (3.19).  The  tolerance  used  for  this  example  was  0.001. 

Table  3.1  compares  the  closed-loop  eigenvalues  and  Hoo  norms  of  state- feedback  designs  with 
those  of  decentralized  observer- based  control  designs  for  several  values  of  a.  For  a  >  4,  the  state- 
feedback  eigenvalues  are  easily  recognizable  in  the  spectra  of  the  decentralized-control  systems;  for 
smaUer  a,  more  interaction  with  other  poles  is  evident.  The  sequence  of  candidate  solutions  of  the 
Riccati-like  equation  converges  for  a  >  2,  while  the  state-feedback  design  Riccati  equation  has  an 
appropriate  solution  for  a  >  1.3. 
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Table  3.1.  Closed-loop  spectra  and  Hoo  norms  for  varying  a. 


State  Feed 
Spectrum 

back 

IITIU 

Decentralized  Contro 
Spectrum 

1 

liriloo 

a  =  20 

-0.24 

-2.54 

-1.45±i2.98 

2.30 

-0.24  -2.52  -1.26±j2.90 
-0.38  -2.54  -1.47±i2.97 
-1.07  -2.70  -1.45±j2.98 

3.64 

a  =  16 

-0.24 

-2.54 

-1.45±j2.98 

2.30 

-0.24  -2.52  -1.26±i2.90 
-0.38  -2.54  -1.47±j2.97 
-1.08  -2.70  -1.45±j2.98 

3.63 

a  =  12 

-0.24 

-2.54 

-1.45±i2.98 

2.29 

-0.25  -2.52  -1.26±j2.90 
-0.38  -2.54  -1.47±i2.97 
-1.08  -2.70  -1.45±j2.98 

3.59 

a  =  8 

-0.24 

-2.54 

-1.45±i2.98 

2.27 

-0.27  -2.52  -1.26±j2.90 
-0.37  -2.54  -1.47±j2.97 
-1.09  -2.70  -1.45±j2.98 

3.49 

a  =  4 

-0.27 

-2.54 

-1.46±i2.98 

2.15 

-0.35±i0.08  -1.26±j2.91 

-1.18  -2.54  -1.47±i2.97 
-2.49  -2.71  -1.45±i2.98 

3.05 

a  =  2 

-0.46 

-2.54 

-1.46±i2.98 

1.76 

-2.36±i0.85  -1.21±i2.98 

-0.48  -2.53  -1.47±i2.98 
-1.38  -2.79  -1.45±j2.94 

1.995 

a  =  1.3 

1.30 

none 

none 

3.3  Example  2 

Consider  the  5***-order  plant  (1.14)  with  q  =  2  and 
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A=\  0  1-1-1  0 

1 


Cl 


=f 

V 


0 

1 

4  -4 

-3 

-1 

1  2 

0 

1 

-1  -1 

2 

1 

-1  0 

-1 

2 

1  -2 

1  0 

0 
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II 
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0 

0 

.  0  , 
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.  1  . 

/  \ 

o 

o 

o 

o 

0  0  0  1  0  1 

II 

,  H  = 

0  0  10  0 

,0  0  0  0  1  / 

o 

o 

o 

o 

The  spectrum  of  A  is 


A{A)  =  {-0.0108  ±j3.717, -3.7138, -1.5906, -I- 1.3262}; 
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hence,  the  plant  has  an  unstable  mode  and  a  lightly-damped  stable  mode.  This  section  gives  the 
results  of  ^oo-norm-bounding  control  designs  for  this  plant.  First,  state-feedba.ck  solutions  are 
presented,  then  observer-based  solutions,  both  centralized  and  decentralized.  For  various  values 
of  the  design  parameter  a,  the  spectrum,  feedback  and  observer  gains,  and  Hoo  norm  for  the 
closed-loop  system  are  ^ven. 

3.3.1  State  feedback 

State-feedback  designs  can  be  computed  for  values  of  a  varying  from  oo  to  1.069199.  For  a  = 
1.069198,  the  solution  X  of  the  state-feedback  design  ARE  (3.3)  has  a  negative  eigenvalue;  hence, 
for  all  practical  purposes,  a^o  =  1.069199. 

The  closed-loop  poles  are  the  eigenvalues  of  F  =  A  —  SX.  Figure  3.1  shows  the  position  of  the 
closed-loop  poles  for  a  varying  from  oo  to  aoo*  Note  that  as  a  decreases  from  oo  to  2.0,  the  poles 
barely  move.  As  a  decreases  from  2.0  to  1.1,  the  most  oscillatory  mode  is  damped  somewhat,  and 
the  other  complex  pole- pair  meets  at  the  real  axis  and  splits  into  a  real  pair.  Finally,  as  a  decreases 
in  the  short  interval  from  1.1  to  Ooot  the  closed-loop  poles  are  extremely  sensitive  to  variations  in 
a:  The  two  remaining  complex  poles  move  leftward  in  the  complex  plane  and  meet  at  the  real  axis; 
then  one  pole  goes  toward  — oo.  Naturally,  moving  a  pole  far  into  the  left-half  plane  requires  high 
feedback  gains:  The  LQ  feedback  matrix  is 

(-0.51  -1.00  -0.21  -0.98  -0.80 
-0.48  -0.40  0.44  -0.94  -0.47 

with  resulting  closed-loop  spectrum 

A(f’)  =  {-0.92  ±  i3.98,  -1.78  ±  jO.35,  -3.54} 

while  a  nearly  ^oo-optimal  (o  =  1.07)  feedback  matrix  is 

(  13.21  -3.67  -51.59  61.76  7.93  ^ 

-66.51  3.97  189.88  -235.86  -40.62  ^ 

with  resulting  spectrum 

A(F)  =  {-81.54,-10.51,-3.65,-2.63,-1.57}. 

These  gains  are  much  larger  than  the  LQ  gains,  and  they  also  have  different  signs.  Reducing  a 
to  Ooo  =  1.069199  results  in  gains  (and  one  closed-loop  pole)  of  me^itude  larger  than  10^. 
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3.3.2  Centralized  observer  feedback 


Observer- based  centralized  controls  can  be  computed  by  the  method  of  Theorem  2.1  for  values 
of  a  ranging  from  oo  to  1.913.  For  a  =  1.912,  the  solutions  X  and  Y  of  (3.3)  and  (1.7)  do  not 
satisfy  the  condition  er.«M,{YX}  <  a^. 

Figure  3.2  shows  the  position  of  the  closed-loop  poles  for  a  varying  from  oo  to  1.913.  As  a  falls 
from  00  to  3.0,  the  most  oscillatory  modes  are  damped  somewhat,  and  all  but  the  leftmost  of  the 
real  poles  move  to  the  left  on  the  real  axis.  As  a  falls  from  3.0  to  2.4,  the  two  leftmost  real  poles 


meet,  split  into  a  complex  pair,  circle  leftward,  meet  agmn  on  the  real  axis,  and  move  apart.  Again, 
as  a  approaches  its  minimum,  one  pole  moves  off  toward  — oo.  As  a  decreases  from  oo  to  1.913, 


each  real-axis  pole  effectively  shifts  from  its  original  LQG  position  to  the  LQG  position  vacated  by 
the  pole  to  its  left,  leaving  the  rightmost  LQG  position  vacant  and  moving  the  leftmost  real-axis 
pole  toward  — oo. 


The  LQG  (a  =  oo)  observer-gain  matrix  is 


/ 


Llqg  = 


1.37 

-0.71 

0.40 

0.09 

0.21 


with  resulting  closed-loop  spectrum 


-0.71 

0.09 

0.21 

1.95 

0.79 

0.70 

0.24 

0.26 

0.31 

0.79 

1.03 

0.15 

0.70 

0.15 

0.61 

A(F;)  =  {-0.92  ±  >3.98,-1.78  ±  >0.35,  -3.54,-1.09  ±  >3.82,  -1.32,-1.69,  -3.78}, 


while  the  observer-gain  matrix  for  c 

t  =  1.92  is 

^  2.47 

1.90 

3.26 

1.29 

1.90 

94.47 

98.89 

24.57 

L  = 

1.55 

25.95 

27.67 

7.12 

3.26 

98.89 

105.59 

25.42 

^  1.29 

24.57 

25.42 

7.04 

with  resulting  spectrum 

A(Fe)  =  {-204.31,-1.22  ±  >4.41,  -1.47  ±  >3.29,-1.75  ±  >0.42,  -3.83,  -3.51,  -1.65}. 


Reducing  a  to  1.913  results  in  some  gains  (and  one  pole)  with  magnitudes  on  the  order  of  10^. 
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3.3.3  Decentralized  control 

Decentralized  controls  can  be  computed  using  the  simple  iterative  method  described  in  Section 
3.2  for  values  of  a  ranging  from  oo  to  2.3323.  The  smaller  the  value  of  a,  the  more  iterations  are 
required  to  obtain  convergence:  For  example,  to  satisfy  a  tolerance  of  0.001  on  the  largest  singular 
value  of  the  left-hand  side  of  the  Riccati-like  equation,  a  =  10  requires  only  6  iterations,  while 
a  =  2.35  requires  47  iterations.  To  speed  up  computations  for  small  a,  the  solution  for  a  slightly 
larger  a  can  be  used  as  the  starting  point;  however,  this  “imbedding”  practice  seems  to  result  in 
convergence  of  the  algorithm  only  when  using  the  starting  point  W  =  0  also  results  in  convergence. 
For  a  =  2.3322  and  below,  the  algorithm  does  not  seem  to  converge. 

Figure  3.3  shows  the  position  of  the  closed-loop  poles  for  a  varying  from  oo  to  2.3323.  As  a 
decreases,  the  oscillatory  modes  are  damped,  and  the  real  poles  move  to  the  left  on  the  real  axis. 
Agmn,  as  a  approaches  its  minimum,  the  poles  on  the  real  axis  seem  to  be  shifting  left  into  the 
positions  originally  occupied  by  other  poles  for  a  =  oo. 

For  a  =  00,  the  observer-gain  matrices  are 


^  1.63 

-0.90  ^ 

(  0.07 

-0.31  '' 

-0.90 

2.61 

0.98 

1.15 

Lx  = 

0.41 

0.40 

,  L2  — 

0.31 

0.44 

-0.04 

1.33 

1.38 

0.16 

0.32 

0.65  ^ 

0.16 

1.22  ^ 

while  the  observer-gain  matrices  for  a 

=  2.3323  are 

^  3.03 

-3.17 

'  5.45 

0.97  ^ 

-3.17 

19.26 

10.08 

6.02 

Li  = 

0.33 

3.71 

,  L2  = 

3.58 

1.86 

-2.16 

18.89 

11.80 

2.40 

^  0.76 

2.92  j 

^  2.40 

3.48  ^ 

Since  the  solution  for  a  =  2.3323  displays  somewhat  higher  gains  and  an  eigenvalue  moving  to 
the  left,  it  seems  a  reasonable  hypothesis  that  solutions  may  exist  for  smalls  -  a,  giving  a  high-gain 
result  as  in  the  state-feedback  and  centralized  observer  cases. 
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3.3.4  Spectrum  and  Hoo  norm  comparisons 

The  spectra  for  state-feedback  solutions  and  subspectra  for  centralized  and  decentralized 
observer-based  solutions  are  shown  for  various  values  of  a  in  Table  3.2.  The  state-feedback  poles 
are  recognizable  among  the  poles  of  both  observer-based  solutions.  Although  the  state-feedback 
root-locus  plot  (Fig.  3.1)  appears  quite  different  from  the  other  two  (Figs.  3.2  and  3.3),  the 
observer-based  solutions  no  longer  exist  when  a  is  small  enough  that  the  state-feedback  poles  have 
moved  significantly  from  their  LQ  positions. 

The  n<3o  norms  of  the  closed-loop  systems  are  compared  for  a  <  5  in  Figure  3.4.  The  norms 
are  seen  to  be  monotone  increasing  with  a.  For  a  =  oo,  the  Haa  norms  are  ||T||oo  =  1-55  for 
state  feedback,  ||r||oo  =  3.322  for  centralized  observer  feedback,  and  ||r||oo  =  4.61  for  decentralized 
observer  feedback,  where  T(s)  is  the  closed-loop  transfer  function  matrix  in  each  case.  As  the  theory 
guarantees,  the  Hoc,  norms  are  always  smaller  than  the  design  parameter  a.  In  the  state- feedback 
and  centralized  observer-based  designs,  the  actual  Hoo  norms  and  the  bound  a  are  very  close  for 
a  close  to  the  minimum  value.  In  the  decentralized  case,  the  actual  norm  approaches  the  bound 
a  in  the  neighborhood  of  a  =  2.5,  then  falls  away  slightly  from  the  bound  as  a  approaches  the 
minimum  value  for  which  solutions  of  the  Riccati-like  design  equation  were  computed.  The  “slack” 
in  the  bound  suggests  that  decentralized  designs  guaranteeing  smaller  norms  may  exist,  possibly 
corresponding  to  solutions  of  the  Riccati-like  equation  for  smaller  values  of  a.  Such  solutions  would 
have  to  be  obtained  by  methods  different  from  those  used  in  this  example. 
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Table  3.2.  Closed>loop  eigenvalues. 


State  Feedback 

Centralized 
Output  Feedback 

Decentralized 

Control 

H 

-0.92±j3.89 

-1.78±i0.35 
-  3.54 

-0.92±j3.89 
-1.78±i0.35 
“3.54  •  •  • 

-0.92±>3.89 
-1.78±i0.35 
-3.54  . . . 

a  =  10 

.0.92±j3.89 
-1.78±i0.35 
-  3.54 

-0.95±i3.93 
-1.77±i0.34 
-3.54  ... 

-0.88±i3.94 
-1.77±i0.34 
-3.54  . . . 

a  =  5 

-0.94±j3.89 

-1.78±j0.35 

-3.54 

-0.97±j4.03 

-1.71±;0.35 

“3*^5  . .  ♦ 

-0.87±j4.02 
-1.74±j0.32 
-3.56  ... 

0  =  3 

-0.99d:j3.89 

-1.78±i0.35 
-  3.54 

-1.01±i4.17 
-1.73±i0.43 
-3.60  . . . 

-0.86±j4.18 
-1.66±j0.46 
-3.58  . . . 

a  =  2.5 

-1.03±i3.89 
-1.78±;0.36 
-  3.54 

-1.04±i4.26 
-1.74±j0.43 
-3.46  . . . 

0  =  2 

-1.12±j3.89 

-1.78±j0.36 

-3.54 

-1.17±j4.39 
-1.75±j0.42 
-3.51  ... 

37 


38 


Figure  S.4:  Comparison  of  actual  closed-loop  Hoo  norms,  Example  2. 


Chapter  4 


Robust  Decentralized  Control 

Consider  again  the  decentralized  plant  (1.14),  now  including  the  structured  plant  uncertainty 

A  =  Ao  +  '£GkMkHk,  (4.1) 

ksl 

where  Aq  is  known,  the  Gk's  and  Hk's  give  the  structure  of  the  uncertainty,  and  each  unknown 
constant  matrix  Mk  satisfies 

AmM {AffcAff }  <  fc  6  {l,2,...,r}.  (4.2) 

If  each  positive  bound  ak  is  sufficiently  small,  then  the  design  equations  to  be  derived  for  robust 
control  will  have  appropriate  solutions.  The  design  developed  in  this  chapter  accounts  for  the 
uncertainty  (4.1),  and  gives  a  robust  decentralized  control  law  for  the  plant.  The  decentralized 
results  also  apply  easily  to  the  simpler  state-feedback  and  centralized  output-feedback  cases,  which 
are  omitted. 

4.1  Robust  Design  Derivation 

With  no  plant  uncertainty  assumed,  the  basic  contrcd  law  of  Theorem  3.1  guarantees  stability 
and  the  ^oo-norm  bound  llTjloo  <  o  for  the  closed-loop  system  (3.9)  by  providing  a  solution  Xe  >  0 
to  the  algebraic  Riccati  equation 

FjXe  +  XeFe  -|-  ^X^G^G^X^  -|-  -I-  Pe  =  0  (4.3) 
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with  Pe  =  0,  and  (Fg,  He)  a  detectable  pair.  Now  suppose  that,  like  the  controller  (3.8)  of  the  basic 
design,  the  contrdler  has  the  form 


it  —  (■^^Oa  ~  I'iCi)^i  4*  Liyi 
Ui  =  -BjXii. 

Suppose  also  that  Li,i£  {1,2,...,  9},  are  chosen  so  that 

O.  +  XA  +  -^XAClX,  +  BjB,  +  J>.  =  0 


(4.4a) 

(4.46) 

(4.5) 


for  some  Pg  >  0,  where  {Fog,Ge,Hg)  describes  the  nominal  closed-loop  system.  In  (4.4)  and  (4.5), 
plant  uncertainty  terms  are  omitted,  so  that 


Fog  = 


Ao  ^BBjXc 


L^C/  ‘^Ootc  “ 


where  Aoae  —  Diag(i4oa,i4oa, . . .  ,i4oa).  We  now  proceed  to  determine  a  choice  of  Pg  >  0  in  (4.5) 
which  will  guarantee 

Fj Xg  +  XgFg  ^  \XgGgGlXg  +  Hj <  0  (4.6) 

a* 


where 


/;  =  Foe  +  S  0)  =  Foe  +  S  GgkMkHgk.  (4.7) 

Assuming  (4.5)  holds,  then 

FjXg  +  XgFg  4-  -^XgGgG^Xg  +  HjHg  =  -F*  4-  (F*  -  Foe)^^e  +  A'e(Fe  -  Fog) 
a* 

=  -Pe  +  i2  {nJkMjGj^Xg  +  XgGgkMkHgk} . 


(4.8) 


k9l 


Recall  that  <Tk  is  ^ven  by  (4.2),  and  set 

Fe  =  E  {HjkBek  +  (TlXgGgkG'^kXe}  >  E  +  XgGgkMkM^ GlkXg) ,  (4.9) 


fcsl 
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(4.10) 


so  that  (4.8)  gives 

FjX^  +  XeFe  + 

=  2  -  XeG,kMkM][G^kXe} 

k^l 

-•£  {x.GMoV  -  MtMf)CLsr.} 

ksl 

=  -E  {^.*  -  x,a,kMi,)  -  «fcr»Ar.} 

iksl 

{jTeGe*  (<r2/  -  MfcMj)  Glx,}  <  0. 

fcsBl 

Therefore,  if  X,  >  0  satisfies  (4.5),  with  Pe  fpven  by  (4.9),  then  (4.6)  holds,  satisfying  the  main 
hypothesis  of  I-emma  2.1  for  the  uncertain  system. 

The  next  step  in  the  derivation  of  the  robust  control  is  to  determine  the  needed  modifications 
to  the  design  equations  (3.3)  and  (3.19)  so  that  Xe  >  0  satisfies  (4.5),  with  Pe  given  by  (4.9).  By 
examination  of  (4.5)  and  (4.9),  and  of  the  definitions  of  Gg  and  He  given  in  (3.9),  it  is  easily  seen 
that 

Fix.  +  X.F,.  +  ^X.a.GTX,  +  HlH.  +  ft  =  FlX.  +  X.Fo,  +  ^X.G.  +  CJVX.  + 


H 
Hi 

Hr 

Hence,  the  robust  design  is  obtained  by  replacing  the  triple  (A,  G,  H)  with  the  triple  (Aq,  G+,  H+) 
in  the  design  equations  (3.3)  and  (3.19)  for  the  basic  design.  Using  the  augmented  matrices  G+  and 
in  the  design  equations  is  similar  to  introducing  additional  disturbance  inputs  and  regulated 
outputs  into  the  problem.  Therefore,  the  smallest  value  of  a  for  which  the  design  equations  will 
have  a  solution  will  be  larger  for  the  robust  design  than  for  the  basic  design. 
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Recall  that,  in  the  basic  design,  the  controller  dynamics  depend  on  an  assumed  worst  distur- 
bamce,  and  hence  on  the  matrix  G.  Therefore,  replacing  G  with  Cr+  in  the  design  affects  not  only 
Ge,  but  also  fbe. 

The  final  step  in  deriving  the  robust  design  is  to  establish  that  {Fe,He)  is  a  detectable  pair. 
Note  that  Lemma  3.1,  applied  to  the  modified  design,  establishes  that  (Foe,He+)  is  a  detectable 
pair,  provided  {Ao,H)  is  a  detectable  pair,  i4oa  =  Ao+a~^G^Ci^X  —  SX  is  Hurwitz,  and  Aqq  +  SX 
has  no  ju;-axis  eigenvalues.  Let  v  ^  0  satisfy 

FeV  =  At?,  HeV  =  0.  (4.12) 

The  detectability  proof  consists  of  proving  that  Re{X)  <  0.  Multiply  (4.10)  on  the  left  by  v*  and 
on  the  right  by  v  to  obtain 

2Re(XyXeV  +  -^v-XeG,GjXeV  + 

*71  (4.13) 

+  J3t?-{XeGeJk(a^/-MfcMj)G2;Are}t?<0. 

fcsl 

Since  every  term  in  (4.13)  but  the  first  is  nonnegative,  this  implies 

iie(A)i?*Xet?  <  0.  (4.14) 

If  inequality  holds  in  (4.14),  then  t?*A’et?  >  0  and  Re(A)  <  0.  If  equality  holds,  then  every  term  in 
(4.13)  is  zero.  This  gives 

{^efc-MjGjtXe}t;  =  0,  {l,2,...,r}.  (4.15) 

But,  since  (4,2)  implies  that  <t^I  —  MkM^  is  nonsingular,  (4.13)  also  pves  G^Xet?  =  0;  therefore, 
(4.15)  gives 

^«fct?  =  0,  fee  {1,2,..., r}.  (4.16) 

Hence,  (4.7)  and  (4,12)  give  Foet?  =  Av,  while  (4.11b)  and  (4.12)  give  Hj+He+v  =  0.  Since 
(Foe,^e+)  is  a  detectable  pair,  this  implies  i2e(A)  <  0. 

Theorem  4.1  summarizes  the  result.  The  following  definitions  are  convenient: 

Aoa  =  Ao  +  ^G+GlX  -  SX,  (4.17a) 


/loac  —  Diag  {Aofji,  /loa*  •  •  • » •^0ot)» 


(4.176) 


(4.17c) 

(4.17d) 


i4oc  —  ^U)ae  4"  Xc, 

Ge+  =  /cG+. 

Recall  that  Ig  is  given  by  (3.10g). 

Theorem  4.1.  Suppose  the  plant  (1‘14)  has  constant  structured  uncertainty  (4.1),  with 

^joMx  ^  <  (Tict  ^  €  {1)2, . . . ,  r}. 

Define  G+  and  as  in  (4.11),  and  let  X  >0  satisfy 

A^X  +  XAg^  -  XSX  +  Hln+  =  0, 

and  W  >  0  satisfy  the  Riccati-like  algebraic  equation 

WAl,  +  AocW  +  ^WXgBgBjXgW  -  WCjCgW 
+Gc+G2;  +  iW-  Wd)CJCc(W  -  Wd)  =  0. 

Suppose  also  that  (Aq,H)  is  a  detectable  pair,  /loa  is  Hurwitz,  and  /loo  +  SX  has  no  eigenvalues 
on  the  juj-ajus.  Then  the  decentralized  control  law 

ii  ~  {Aoa  ~  -f  LiHi,  i  €  {1,2, ...  ,9}, 

Ui  =  -BjXii,  t  €  {l,2,...,g}, 

with  Li  =  WiiCj ,  i  €  {l,2,...,g},  robustly  stabilizes  the  uncertain  plant,  and  the  closed-loop 
transfer-function  matrix  T(s)  from  Wg  to  z  ^satisfies 

imioo  <  a. 

There  is  no  explicit  restriction  on  the  size  of  the  bounds  Ok  in  Theorem  4.1.  However,  the  larger 
the  (Tjk’s  are  taken  to  be,  the  larger  a  will  need  to  be  to  obtain  solutions  to  the  design  equations 
(4.18)  and  (4.19);  if  the  cr^’s  are  taken  to  be  too  large,  no  solutions  may  exist  at  all.  If  bounds  <jk 
on  the  size  of  the  uncertainty  are  known  accurately,  then  these  bounds  should  be  incorporated  in 
G+  (or  ),  and  hence  in  the  design  equations.  If  the  design  equations  can  then  be  solved,  then 
the  design  can  tolerate  uncertiunties  of  the  specified  size.  On  the  other  hand,  if  uncertainty  bounds 
are  not  accurately  known,  the  choice  of  the  <7fc’s  may  be  used  to  reflect  a  relative  weighting  to  be 


(4.18) 


(4.19) 
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given  by  the  design  to  disturbance  attenuation  and  robustness  considerations.  Since  changing  the 
values  of  the  aj^’s  in  this  case  is  equivalent  to  rescaling  the  Gk's  and  Hk's  while  holding  the  aj^’s 
fixed,  it  may  simplify  the  design  procedure  to  set 

<^k  =  -r  fee  {1,2,..., r}, 

and  scale  the  Gk's  and  Hk's  so  as  to  reflect  the  tradeoff  between  robustness  and  disturbance 
attenuation.  Then,  the  size  of  the  uncertainty  which  may  be  tolerated  is  determined  indirectly  by 
finding  the  smallest  value  of  a  for  which  the  design  equations  can  be  solved.  This  variation  on  the 
design  of  Theorem  4.1  is  given  in  Theorem  4.2. 

Theorem  4.2.  Suppose  the  plant  (1.14)  has  constant  structured  uncertainty  (4.1),  with 

l:G{l,2,...,r}. 

Define  G+  =  (G  Gj  ...  Gr)  and  ...  Hj).  Let  X  >  0  satisfy  (4.18)  and  let 

W  >  0  satisfy  the  Riccati-Iike  algebraic  equation  (4.19).  Suppose  also  that  (Ao,ff)  is  a  detectable 
pair,  Aoa  is  Hurwitz,  and  Aoa  +  SX  has  no  eigenvalues  on  the  jut-axis.  Then  the  decentralized 
control  law 

ii  =  (Aoa  -  LiCi)^i  +  Lij/i,  i  €  {1,2, . . .  ,g}, 

Ui  =  -BfX^i,  » 6  {l,2,...,g}, 

with  Li  =  WiiCf,  i  €  {1,2, ...,q},  robustly  stabilizes  the  uncertain  plant,  and  the  closed-loop 
transfer-function  matrix  T(s)  from  to  z  satisfies 

m\co  <  a. 

4.2  Example 

This  section  presents  an  example  of  robust  state-feedback  control  design.  The  example  illustrates 
the  difference  between  the  robust  designs  of  Theorems  4.1  and  4.2,  and  the  use  of  the  parameter  <ti 
to  determine  the  largest  uncertainty  in  a  certain  class  for  which  the  design  guarantees  stability  and 
the  predetermined  /foo-norm  bound.  For  these  purposes,  the  state-feedback  example  is  adequate, 
and  has  the  advantage  of  avoiding  the  complication  of  decentralized  design,  already  studied  in 
Chapter  3. 
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Consider  the  plant  of  Section  3.2,  now  in  a  state-feedback  setting,  where  the  matrices 


'  -2 

1 

1 

1^ 

■  0 

0  '' 

f  M 

3 

0 

0 

2 

1 

0 

0 

B  = 

G  = 

-1 

0 

-2 

-3 

0 

0 

1 

<  -2 

-1 

2 

-1; 

<0 

^0/ 

Ao  = 


describe  the  nominal  plant.  Introduce  the  structured  uncertainty 

i4  =  Ao  +  GiMiHi, 

where  Mi  is  an  unknown  scalar,  and  Gi  and  Hi  are  given  by 


/o\ 


ff  =  (1  0  -  1  0) 


Gi  = 


0 

0 

1 


.ffi  =  (0  0  1  0). 


(4.20) 


G^  = 


This  represents  an  uncertainty  in  the  (4,3)  element  of  the  A-matrix  of  the  plant.  As  in  the  decen¬ 
tralized  design  of  Theorem  4.1,  the  robust  state-feedback  control  is  found  by  doing  a  basic  design, 
but  with  the  augmented  matrices  (7+  and  n+  in  place  of  G  and  H,  where  in  this  case 

0  \ 

0  0  f  1  0  -1  0 

10  \0  0  1  0 

\0  a(Ti  j 

The  state-feedback  design  equation  becomes 

A^X  +  XAo  +  ^XG+GlX  -  XSX  -I-  hIh^  =  0, 

or  equivalently 

AlX  -I-  XAo  +  j^XGG'^X  -I-  alXGiG^X  -  XSX  -I-  H'^H  -I-  HJ Hi  =  0.  (4.21) 

In  the  second  quadratic  term  of  (4.21),  the  a’s  cancel  out,  allowing  computation  of  a  solution  for 
a  =  00.  By  setting  a  =  oo  and  solving  (4.21)  with  various  values  of  <ti  ,  one  may  determine  a  largest 
plant  perturbation  (corresponding  to  (A/il  =  <ri„„)  for  which  at  least  stability  can  be  guaranteed 


48 


using  thfl  robust  state-feedback  design.  Then,  given  any  <t\  <  one  may  determine  a  number 
amin  such  that  for  any  a  >  Omin  there  exists  an  appropriate  solution  of  (4.21),  and  therefore  an 
associated  design  guaranteeing  the  robust  ^oo-Q<>rm  bound  ||T||oo  <  ot  for  the  closed-loop  system. 
Table  4.1  gives,  to  the  nearest  0.1,  the  values  of  amin  computed  for  various  values  of  a\,  and  shows 
clearly  the  tradeoff  between  robustness  and  optimal  disturbance  rejection.  In  this  example,  the 
largest  admissible  plant  perturbation  is  given  approximately  by  =  1.8. 

If  ffi  =  a~^,  as  in  Theorem  4.2,  then  for  Gi  and  Hi  ^ven  by  (4.20)  the  design  equation  becomes 

-f-  XAq  Jr  -^X  (gG^  -I-  GiG^)  X  -  XSX  +  H^H  +  Hi  =  0.  (4.22) 

The  approximate  smallest  value  of  a  for  which  (4.22)  has  an  appropriate  solution  is  Omin  =  1.4, 
which  corresponds  to  a  plsmt  uncertainty  bound  (Ti  =  0.71. 


Table  4.1;  Approximate  minimum  ^oo*norm  bounds  for  various  plant  uncertainties. 


Chapter  5 


Reliable  Control  Design 


This  chapter  develops  reliable  centralized  and  decentralized  control  designs  which  guarantee 
stability  and  disturbance  attenuation  despite  possible  measurement  or  control  failures.  First 
is  presented  an  example  which  establishes  the  desirability  of  a  reliable  decentralized  design.  Next, 
centralized  reliable  designs  are  presented  which  guarantee  stability  and  an  .?oo-norm  bound  despite 
possible  outages  of  sensors  or  actuators  within  predefined  susceptible  sets.  The  cases  of  sensor  and 
actuator  outages  are  treated  separately,  resulting  in  two  designs  with  different  reliability  properties. 
Then,  decentralized  reliable  designs  are  presented  which  guarantee  stability  and  an  .Noo-norm  bound 
despite  possible  outages  of  whole  controllers  within  a  predefined  set  of  susceptible  controllers.  The 
controller  outages  are  modelled  first  as  measurement  outages,  and  then  as  control  input  outages, 
resulting  in  two  distinct  designs  with  the  same  reliability  properties. 

5.1  Motivation 

The  d^^'-order  example  of  Section  3.2  is  used  to  motivate  the  development  of  a  reliable  decentral¬ 
ized  control.  In  this  example,  stability  and  a  predetermined  ^oo-norm  bound  are  guaranteed  by  the 
basic  decentralized  design  for  various  values  of  the  design  parameter  a.  Table  5.1  ^ves  the  actual 
Hoo  norms  of  the  closed-loop  systems  corresponding  to  several  values  of  a.  In  addition  to  the  case 
when  no  controller  failure  occurs.  Table  5.1  gives  the  conditions  corresponding  to  a  failure  of  each 
of  the  two  controllers.  A  failure  of  Controller  #1  results  in  instability  for  each  design  computed, 
while  a  failure  of  Controller  #2  results  only  in  an  increased  Hqo  norm  for  the  closed-loop  system. 
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Table  5.1.  Hoo  norms  for  the  basic 
_ decentralized  design. _ 


no  fsdlure 

#1  fails 

#2  fails 

a  =  20 

unstable 

5.34 

o  =  16 

unstable 

o  =  14 

3.61 

unstable 

5.28 

a  =  12 

3.59 

unstable 

5.23 

a  =  8 

3.49 

unstable 

5.04 

a  =  4 

3.05 

unstable 

4.19 

a  =  2 

1.995 

unstable 

2.46 

Since  the  plant  is  open-loop  unstable,  a  failure  of  both  controllers  at  once  necessarily  results  in 
instability;  however,  it  would  be  desirable  to  alter  the  design  so  as  to  guarantee  at  least  stability, 
and,  better  still,  some  level  of  disturbance  attenuation  for  the  closed-loop  system  if  only  one  con¬ 
troller  should  fsdl.  While  the  basic  design  in  this  case  still  works  well  if  only  Controller  #2  fails, 
it  is  not  acceptable  if  Controller  #1  fails.  Therefore,  a  design  reliable  with  respect  to  failure  of 
Controller  #1  is  desired. 

The  approach  to  reliable  design  developed  here  is  similar  to  that  for  robust  design  developed 'in 
Chapter  4.  The  essential  idea  is  that,  if  there  exists  Xe>0  satisfying 

+  XeFe  +  -^XeGeGjXe  +  +  Pe  =  0  (5.1) 

with  some  Pe  >  0,  then  the  resulting  closed-loop  system  will  by  Lemma  2.1  be  stable  and  have  Pqo- 
norm  bound  a.  By  judicious  choice  of  Pe,  additional  system  properties  associated  with  reliability 
can  be  assured.  Then,  perturbations  are  introduced  into  the  basic  design  equations  such  that  (5.1) 
is  satisfied  for  that  choice  of  Pe.  As  in  the  robust  design,  the  appropriate  choices  of  Pe  are  equivalent 
to  appending  columns  or  rows  to  G  or  H  in  the  basic  design  equations. 


5.2  Reliable  Centralized  Design 

The  problem  addressed  here  is  that  of  designing  a  centralized  controller  which  is  reliable  despite 
possible  sensor  or  actuator  outages.  The  outage  will  be  restricted  to  occur  within  a  preselected 
subset  of  available  measurements  or  control  inputs.  The  controllers  developed  will  guarantee  closed- 
loop  stability  and  a  predetermined  Poo-norm  bound,  regardless  of  admissible  sensor  or  actuator 
failures.  The  cases  of  sensor  and  actuator  outages  are  treated  separately,  and  two  designs  are 
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developed  to  handle  the  two  cases.  However,  it  will  be  clear  from  the  results  that  controllers  which 
can  handle  both  sensor  and  actuator  outages  can  be  obtmned  by  combining  the  designs. 

Consider  first  the  design  of  a  controller  that  can  tolerate  the  outage  of  certain  sensors  which 
provide  the  various  elements  of  the  measurement  vector  y.  Let  Q  C  {1,2, . . .  ,dim(y)}  correspond 
to  a  selected  subset  of  sensors  susceptible  to  outages.  Introduce  the  decomposition 

C  =  Co  +  Cfl,  (5.2) 

where  Cn  denotes  the  measurement  matrix  associated  with  fl,  and  C(i  denotes  the  measurement 
matrix  associated  with  the  complementary  subset  of  measurements.  In  other  words,  Cq  is  the 
same  as  C,  but  with  rows  corresponding  to  susceptible  sensors  zeroed  out.  Let  a;  C  fl  correspond 
to  a  particular  subset  of  the  susceptible  sensors  that  actually  experience  an  outage,  and  let  Tq{s) 
denote  the  transfer-function  matrix  of  the  resulting  closed-loop  system.  It  is  convenient  to  adopt 
the  notation 

C  =  C^-k-Ca  (5.3) 

where  Cu  and  Cq  have  meanings  analogous  to  those  of  Cn  and  Cn  in  (5.2).  Since  tt/  C  fi,  CjCu;  < 
CoCq.  Also  decompose  the  observer  gain  as 

L  —  Lttf  +  Lq  (^■4) 


so  that 


LC  = 


L/qCq* 


{La  has  columns  zeroed  out  corresponding  to  sensors  which  have  actually  failed.)  Then  the  following 
result  holds: 


Theorem  5.1.  With  all  assumptions  and  the  design  otherwise  as  in  Theorem  2.1,  assume  X  >  0 
and  y  >  0  satisfy  the  AREs 

A'^X  +  XA-  XSX  +  ^XGG'^X  -r  +  o^CjCn  =  0,  (5.5) 

AY  +  YA^  +  ■^YH'^HY  -  YClC^Y  -t-  GC^  =  0,  (5.6) 

respectively.  Then,  for  sensor  outages  corresponding  to  any  u;  C  fi,  the  closed-loop  system  is  stable, 
and  IITolloo  <  a. 
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Remark:  With  all  sensors  operational,  corresponding  to  u;  =  0,  Tc(s)  =  T{s)  is  the  transfer- 
function  matrix  from  Wg  to  z,  where 

-=(:)•  ^ 

Theorem  5.1  covers  this  case  automatically,  since  w  =  0  C  fl.  If  sensors  corresponding  to  a 
nonempty  subset  u;  CCl  fail,  then  Ta(s)  is  the  transfer-function  matrix  from  Weo  to  z,  where 

(Wo\ 

with  Wa  containing  only  those  components  of  measurement  noise  associated  with  operational  sen¬ 
sors. 

Proof.  The  design  equations  (5.5)  and  (5.6)  arise  from  replacing  H  in  the  description  of  the  plant 
by  the  augmented  matrix 

and  chan^ng  the  design  equations  accordingly.  If  (5.5)  and  (5.6)  have  appropriate  solutions,  then 
Theorem  2.1  guarantees  that  Xe  >  0  satisfies 


Fjx,  -I-  =  0, 


(5.8) 


where  the  augmented  closed-loop  system  is  described  by  the  matrices 


Fe  = 


A  -SX 
LC  Aa-LC 


^e+  = 


H+  0 
0  -B'^X 


(5.9) 


and  (Fe,  He+)  is  a  detectable  pmr.  The  actual  closed-loop  system  with  no  sensor  outages  is  described 
by  the  matrices 


Fe  = 


A  -SX 
LC  Aa-LC 


,Ge  = 


G  0 
0  L 


H  0 
0  -B^X 


(5.10) 


For  sensor  outages  corresponding  tou  Cil,  the  controller  becomes 


i  =  iA  +  •\gg'^X  -SX-  LC)(  -I-  Lay, 
a* 


u  =  -B^X^. 


(5.11a) 

(5.116) 


53 


The  controller  dynamic  structure  is  not  affected  by  a  sensor  outage;  only  the  controller  input 
structure  is  effectively  changed.  Given  (5.11),  the  closed-loop  system  matrices  become 


Fea  — 


A  -SX 
LqCq  Aa  —  LC 


1  ~ 


G  0 

0  Lq 


,H,= 


H  0 
0  -B^X 


The  following  useful  relations  are  derived  from  (5.9),  (5.10),  and  (5.12): 


Fe  =  Feo  + 


GeG^  = 


0 

0  LqL'q 


FeO 


GeCiGgQ  +  LewL^, 


HT.He+  =  HTHe  +  a‘^ 


ClCn  0 
0  0 


Use  (5.8)  and  (5.13)  to  obtain 


(5.12) 


(5.13a) 

(5.136) 

(5.13c) 


+  X,F^c  +  -|-  HJH,  ^ 

(5.14) 

=  -CLll^Xe  -  XeiewCew  -  -^X,L^LI,X,  -  a^f^){Cci  0). 

Therefore,  since  —CqCq  <  -GJG^,  (5.14)  gives 

F%,Xe  +  XeF,G,  +  -^X,GeG>(^aXe  +  HTH, 

<  -ClLl,Xe  -  X,L^C^  -  ^XeL^LlX,  -  a^ClC^  (5.15) 

=  -  +  aCl)  (ilL^e  +  aC«.)  <  0. 

Hence,  provided  {Fea,  He)  is  a  detectable  psur,  Lemma  2.1  guarantees  that  Fea  is  Hurwitz,  and  that 
Ta{s)  =  He{sl  ~  Fea)~^Geai  the  transfer-function  matrix  from  Wea  to  satisfies  HTcHoo  <  «. 
The  detectability  proof  is  routine:  If  =  (uf  v^)  ^  0  satisfies  FeaV  —  At>  and  HeV  =  0,  then 
Av\  =  Avi  and  Hv\  =  0,  with  {A,H)  assumed  a  detectable  pair.  Therefore,  either  Re(A)  <  0  or 
vi  =  0.  Suppose  vi  =  0;  then  FeV  =  FeaV  =  Av  and  /fe*'  =  0  gives  Be+v  =  0.  Since  (Fe,  ^e+)  is  a 
detectable  pair,  Re(A)  <  0.  Q.E.D. 


Consider  now  the  design  of  a  controller  that  can  tolerate  the  outage  of  certain  actuators  which 
provide  the  various  elements  of  the  control  vector  u.  Let  fl  C  {1,2,  ...,dim(u)}  correspond  to  a 
selected  subset  of  actuators  susceptible  to  outs^es.  Introduce  the  decomposition 

B  =  Bn  +  Bfi,  (5.16) 
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where  Bq  denotes  the  control  matrix  associated  with  the  set  Q,  and  denotes  the  control  matrix 
associated  with  the  complementary  subset  of  control  inputs.  In  other  words,  is  the  same  as 
B,  but  with  columns  corresponding  to  susceptible  actuators  zeroed  out.  Let  u  C  correspond 
to  a  particular  subset  of  the  susceptible  actuators  that  actually  fail,  and  let  Tq{s)  denote  the 
transfer-function  matrix  of  the  resulting  closed-loop  system.  It  is  convenient  to  adopt  the  notation 


B  —  B,^  -f-  Bq 

(5.17) 

where  B^)  and  Bq  have  meanings  analogous  to  those  of  Bq  and  Bq  in  (5.16). 
BuB^  <  BqB^.  Then  the  following  result,  dual  to  Theorem  5.1,  holds: 

Since  u  C  SI, 

Theorem  5.2.  With  all  assumptions  and  the  d^ign  otherwise  as  in  Theorem  2.1, 

and  Y  >  0  satisfy  the  AREs 

assume  X  >0 

A^X  -i-XA-  XBqBIX  +  ^XGG'^X  -I-  =  0, 

a* 

(5.18) 

AY  -1-  YA^  -i-  ^YHThY  -  YC'^CY  -I-  -I-  o^BqBI  =  0, 

(5.19) 

respectively.  Define 

G+  =  (G  oBq), 

(5.20) 

and  let  the  controller  be  given  by 

4  =  (A  -1-  ~G+Gj X  -SX-  LC)i  -1-  Ly, 

(5.21a) 

u  = 

(5.216) 

Assume  the  controller  is  open-loop  (internally)  stable.  Then,  for  actuator  outages  corresponding 
to  any  uf  C  Q,  the  closed-loop  system  is  stable,  and  ||To||oo  ^ 

Remark:  For  actuator  outages  corresponding  to  u;  C  f2,  Ta(s)  is  the  transfer-function  matrix  from 
We  to  Zq,  where  zq  excludes  control  components  associated  with  failed  actuators. 

Proof.  The  design  equations  (5.18)  and  (5.19)  arise  from  replacing  the  matrix  G  in  the  description 
of  the  plant  (1.3)  with  the  augmented  matrix  G+,  and  introducing  the  corresponding  changes  in 
the  design  equations.  If  (5.18)  and  (5.19)  have  appropriate  solutions,  then  Theorem  2.1  guuantees 
that  Xe  >  0  satisfies 

pj"  Xe  +  XeFe  +  -^XeGe+G^^Xe  +  He  —  0,  (5.22) 
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where  the  augmented  closed-loop  system  is  described  by  the  matrices 


A  -SX 
LC  Ac-LC 


»  = 


G+  0 
0  L 


0  -B^X 


(5.23) 


with  i4a  =  >1  +  a~^G+G'^X  —  SX  and  {Fe,He)  a  detectable  pair.  When  there  are  no  actuator 
outages,  the  actual  closed-loop  system  is  described  by  the  matrices 


A  -SX 
LC  A^-LC 


G  0 


0  -B'^X 


(5.24) 


For  actuator  outages  corresponding  to  C  12,  the  controller  becomes 


^  =  (a  -I-  j^G^GlX  -SX-Lc'^i->r  Ly, 


u  =  -BlX^. 


(5.25a) 


(5.256) 


The  controller  dynamic  structure  is  not  affected  by  actuator  outages;  only  the  controller  output 
structure  is  effectively  changed.  Given  (5.25),  the  closed-loop  system  is  described  by  the  matrices 


Fea  — 


A  -BaBlX 
LC  Ac  -  LC 


,Ge  = 


G  0 
0  L 


>  Llta>  “ 


0  -BlX 


(5.26) 


The  following  useful  relations  are  derived  from  (5.23),  (5.24),  and  (5.26): 


Fe  =  Feo  -  BlX)  =  Fes  -  Few(0  BIX), 

HJh,  =  -I-  B^X), 


Ge+Gf^  =  GeGj  -I- 


BuBl  0 
0  0 


(5.27a) 


(5.276) 


(5.27c) 


Use  (5.22)  and  (5.27)  to  obtain 


Fj^X,  X,F^-\-^X,G^G^X,^-Hj^H^a 

<  -  {x.B^  -  -  (o  fljAT))  <  0. 


(5.28) 


Provided  (Fes,  Hew)  is  a  detectable  pair.  Lemma  2.1  guarantees  that  Feo  is  Hurwitz,  and  that 
To{s)  =  Hto(sI  -  Fes)~*Ge  satisfies  ||Ts||oo  <  To  prove  detectability,  let  =  (vf  wf )  5^  0 


satisfy  Feov  =  Av  and  HeaV  =  0;  then  Av\  a  Avi  and  Hv\  a  0,  with  {A,n)  assumed  a  detectable 
pair.  Therefore,  either  Re{\)  <  0  or  ui  =  0.  If  »i  a  0,  then  FeoV  —  Aw  gives 

{A  +  ^G^GlX  -SX-  LC)v3  a  Aw2.  (5.29) 

By  the  assumption  that  the  controller  is  open-loop  stable,  (A-\-a~^G+G^X  —  SX  —  LC)  is  Hurwitz; 
therefore,  fic(A)  <  0.  Q.E.D. 

The  design  given  in  Theorem  5.2,  unlike  that  ^ven  in  Theorem  5.1,  requires  that  the  controller 
turn  out  stable  in  order  to  guarantee  reliable  closed-loop  stability.  If  the  design  does  not  result  in 
a  stable  controller,  it  may  be  combined  with  a  strongly  stabilizing  design  developed  in  Section  5.5; 
then  the  assumption  of  open-loop  stability  of  the  controller  will  hold  automatically. 

Note  that  to  achieve  reliability  with  respect  to  sensor  outages,  it  is  sufficient  to  modify  the 
feedback  and  observer  gains;  however,  to  achieve  reliability  with  respect  to  actuator  outages,  the 
observer  structure  must  also  be  modified.  The  structural  modification  required  is  the  inclusion  of 
G+  in  the  controller  dynamic  matrix. 


5.3  Reliable  Decentralized  Design 


Let  Q  C  {l,2,...,q}  correspond  to  a  subset  of  controllers  subject  to  outages.  The  problem  is 
to  compute  a  decentralized  control  law  which  guarantees  closed-loop  stability  and  an  B'oo-norm 
bound  in  spite  of  controller  outages  corresponding  to  any  subset  u;  C  11.  Without  loss  of  generality, 
fl  =  {t  1,  f  -I-  2, . . . ,  and  u  =  {r  -I- 1,  r  -|-  2, . . . ,  g},  with  r  >  f.  Introduce  the  decompositions 


B  =  (Bi . . .  Bf  0 ...  0)  -h  (0 ...  0  Br+\  • . .  Bq)  =  Bq  +  B^,, 

Be  =  Diag(J3i,...,Br,0,...,0)-|-Diag(0,...,0,5r+i  , . .  .  ,  Bq')  =  Bea  +  Bcu^ 


c  = 

Cr 

0 

+ 

0 

Cr+1 

^  0  J 

<  ^9  ) 

(5.30a) 

(5.306) 


(5.30c) 
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Cc  —  013^(01 »  •  •  •  j  Cr » Oj . .  •  >0)  +  Dl3g(0t  .  •  •  )  0)  CV-flt  •  •  •  *  C'j)  —  CcO  "H  C'cu/i 
Lg  =  Di3^(Xi)  •  •  •  t  •£'r»0i  •  •  •  *0)  +  013^(0) . .  •  f  0)  J/f+it  •  •  • » Lq)  =  Xicc  ■^'cw 

Also  decompose  the  disturbance  and  regulated  output  vectors  as 


(5.30d) 

(5.30e) 


/  \ 

VJQ 

(  Wo\  (  “'eo  \ 

=UJ’ 

\  tUu.  ; 


Z=  Itfi, 


-fc)^ 


Finally,  define 


Note  that  for  any  u  CCl, 


Sq  =  (Bt+i . . .  Bq), 

cJ  =  (cS.,...0. 


(5.31a) 


(5.316) 


(5.32a) 

(5.326) 


(5.33) 

(5.34) 


When  no  controller  failures  occur,  the  closed-loop  system  is  described  by  matrices  of  the  form 


A  -BBJ 


\XcC-  [o  -BJX. 

where  Aae  =  Diag(Aa,  Aa, .  •  • ,  A*).  Suppose  that  controller  failures  take  the  form 


G  0 


H  0 


Vi  =  0,  *  6  w. 


(5.35) 


The  closed-loop  system  then  takes  the  form 


(8- 


A  -BB'^Xc 
LeaCa  Aae  ~~  ^eGe 


*)  +  r  “ 

,V  \  0  LeG 


0  -BjXc  ) 


=  Hgx, 


FgQXe  +  Geo^t,  (5.36a) 


(6.366) 
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Because  of  the  assumed  mode  of  fulure,  ^ven  by  (5.35),  the  disturbances  wj,  t  €  u),  do  not  enter  the 
system  (5.36).  In  fact,  (5.36)  is  a  controllability  canonical  form,  with  t  €  u;,  the  uncontrollable 
parts  of  the  extended  state  vector.  Note  also  that 

•dote  —  ~  Di38('dor  —  XiCl,  .dot  —  •  •  •  *  d<jr  —  LqCq),  (5.37) 

where  da  -  LiCi  is  the  open-loop  dynamic  matrix  of  the  controller.  Because  of  the  form  of 
(5.36),  the  open-loop  eigenvalues  of  the  controllers  which  have  failed  appeair  directly  as  modes  of 
the  closed-loop  system.  This  means  that  a  design  guaranteeing  reliable  stability  will  automatically 
guarantee  that  all  controllers  susceptible  to  outages  are  open-loop  stable. 


It  is  convenient  to  note  that  Fga  Gea  axe  related  to 

=  0)  =  /; 

Fe  and  Gg  by 

~  LeuGeuf 

(5.38a) 

/  0  0  ^ 

Gea  =  Ge  —  I 

(5.385) 

^  0  Leu  y 

GeaGl,  =  GeGl-LeuLl,. 

(5.38c) 

The  design  which  follows  will  guarantee  that  Fea  is  Hurwitz,  and  that  the  transfer-function  matrix 
To{3)  =s  Hei^I  —  Fea)'~^Gea  satisfies  |lTa||oo  <  a,  for  controller  outages  associated  with  any  w  C  ft. 
The  case  where  no  controllers  fail  (represented  by  b;  =  0  C  0)  is  always  admissible;  hence,  the 
design  will  automatically  guarantee  that  Fe  is  Hurwitz  and  that  T(s)  s  He{sl  -  Fe)~^Ge  satisfies 
Halloo  <  a.  The  following  theorem  gives  the  reliable  design  method. 

Theorem  5.3.  With  all  assumptions  and  the  decentralized  design  otherwise  as  in  Theorem  3.1, 
let  X  >0  satisfy 

A^X  +  XA  +  ^XGG'^X  -  XBB^X  -I-  H^H  -1-  a^C^Ca  =  0,  (5.39) 

where  fl  C  {1, 2, . . , ,  g}.  Then,  for  controller  outages  corresponding  to  any  u;  C  fi,  the  closed-loop 
system  (5.8)  is  internally  stable,  and  the  closed-loop  transfer-function  matrix  Ta{s)  from  WgQ  to 
zq  satisfies  ||Ta||oo  <  o-  fo  addition,  all  controllers  corresponding  to  the  “susceptible”  set  fl  are 
open-loop  stable. 
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Remark:  The  design  given  in  Theorem  5.3  results  from  replacing  H  in  the  description  of  the  plant 
(1.14)  with  the  augmented  matrix 

/  IT  \ 

(5.40) 


and  changing  the  design  equations  accordingly.  This  substitution  results  in  no  change  in  the  design 
equation  (3.19),  and  is  equivalent  to  selecting  Pt  in  (5.1)  as 


Pe  = 


(i^CqCq 

0 


(5.41) 


The  basic  decentralized  design  computed  for  the  augmented  plant  will  provide  reliable  control  for 
the  actual  plant. 

Proof.  Just  as  in  the  development  of  Section  3.1,  the  existence  of  appropriate  solutions  to  the 
perturbed  design  equations  (5.39)  and  (3.19)  guarantees  that  Xe  >  0  satisfies 


FjX,  +  X,Fe  +  ■^X.G.GjX,  +  =  0, 


(5.42) 


where 


(5.43) 


Now  (5.38),  (5.40),  (5.42),  and  (5.43)  give 


FTaX,  +  XeF,a>  +  ^X,GeC,Gj^,  +  HjHe 

=  -ClLl,Xe  -  X,L^C^  -  ^X,L^Ll,X,  -  0). 

Therefore,  by  (5.34), 

F^aXe  +  XeFeC  +  ^XeGe<^Gj^Xe-\-njH, 

<  -Cl,Ll,X,-X,L^C^-^X,L^Ll,X,-a^Cl,C^ 

=  -  (^XeL^  +  aCt)  {hLl,Xe  +  acj)  <  0. 

Hence,  provided  {Fto,  He)  is  a  detectable  pair.  Lemma  2.1  guarantees  that  Fea  is  Hurwitz,  and  that 
To(s)  =  He{I»  —  Feo)~^Gea,  the  transfer-function  matrix  from  Weo  to  zq,  satisfies  |irQ||oo  <  a- 
The  detectability  proof  is  the  same  as  that  of  Lemma  3.1:  Assuming  v  /  0  satisfies  FeaV  =  Xv  and 
HeV  =  0  gives  Av\  =  Aui  and  Hvi  —  0,  with  (AyH)  assumed  a  detectable  pair.  Therefore,  either 
Re{X)  <  0  or  Wi  =  0.  If  v\  =  0,  then  {Age  ~  LcCc)v2  =  Awj,  and  hence  (Ac  -  LcCc)v2  =  Xv2,  where 
Ac  —  LeCe  is  known  to  be  Hurwitz.  Q.E.D. 
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Recall  that  the  closed-loop  system  (5.36)  assumes  measurement  failures  corresponding  to  each 
i  €  (if.  If  instead  there  are  control  input  failures,  that  is,  if  the  controller  failures  are  given  by 


Ui  =  0,  i  €  w. 


(5.44) 


then  the  closed-loop  system  has  the  form 


(»■ 


FeoXe  +  GeWe 


2  = 


H  0 
0 


~  BeQXgf 


(5.45a) 


(5.456) 


where  Feo  has  been  redefined.  Note  that  (5.45)  is  an  observability  canonical  form,  with  i  €  a;, 
the  unobservable  parts  of  the  extended  state  vector.  In  fact,  for  a  given  decentralized  control 
law,  (5.36)  and  (5.45)  are  just  two  different  realizations  of  the  same  transfer-function  matrix. 
However,  the  form  (5.45)  leads  to  the  need  for  a  different  matrix  Pg  in  (5.1)  to  guarantee  reliable 
stability  and  performance,  and  hence  to  a  different  control  law.  Again,  the  closed-loop  eigenvalues 
of  the  controllers  which  fail  appear  directly  as  modes  of  the  closed-loop  system;  unlike  the  proof 
of  Theorem  5.3,  however,  the  following  development  must  assume  that  all  the  controllers  turn  out 
open-loop  stable.  If  some  controllers  turn  out  unstable,  the  design  of  Theorem  5.4  may  be  combined 
with  a  strongly  stabilizing  decentralized  design  developed  in  Section  5.5. 

It  is  convenient  to  note  that  Fea  ^d  Hea  related  to  Pg  and  He  by 


Fea  =  ^«  +  n  (0  =  Fe  +  Be^iO  P^^c) 


Hea  —  Be  + 


0  0 
0  BlX. 


=  bTh. -  Blx,) 


(5.46a) 

(5.466) 

(5.46c) 


The  following  theorem  gives  the  design  method: 


Theorem  6.4.  With  all  assumptions  and  the  decentralized  design  otherwise  as  in  Theorem  3.1, 
let  X  >  0  satisfy 

A^X  +  XA  +  ^XGG'^X  -  ASflA  -I-  =  0,  (5.47) 


o' 
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and  Jet  W  >  0  satisfy 


WAl^  +  A^W  -WC^CcW 

+  a^IcSnlI  +  iW--WD)CjCc{W-WD)  =  0, 


(5.48) 


where 


If  =  (//.../] 

Ae+  =  Ae  +  Diag(SQX,SnX,...,S{iX), 

Sq  =  BqBq, 

S  =  Sa  +  5ft, 

and  ft  C  {1,2, . .  .,q}.  Let  the  controllers  be  given  by 

ii  =  (A  +  ^G+Glx  -SX-  LiCi)^i  +  LiVi,  *  e  {1, 2, . . . , 

Uf  =  —B^  X^if  t  £  {1, 2, . . . ,  9}, 


(5.49a) 

(5.496) 


and  assume  all  controllers  are  open-loop  (internally)  stable.  Then,  for  controller  outages  corre¬ 
sponding  to  any  w  C  Q,  the  closed-loop  system  (5.45)  is  internally  stable,  and  the  closed-loop 
transfer-function  matrix  To(s)  from  Weo  to  Zq  satisfies  ||rc||oo  ^  "• 

Remark:  The  design  equations  (5.47)  and  (5.48)  arise  from  replacing  G  in  the  plant  description 
(1.14)  with  the  augmented  matrix  G.^.  given  by 


G+  =  (G  aBn), 


(5.50) 


and  chan^ng  the  design  equations  accordingly.  This  substitution  affects  both  the  state-feedback 
design  ARE  and  the  Riccati-like  design  equation  for  computing  decentralized  observer  gains.  The 
substitution  is  equivalent  to  selecting  Be  in  (5.1)  as 


0 

Pe  =  Xe  Xe  >  0. 

10  0/ 


(5.51) 


The  basic  design  computed  for  the  augmented  plant  will  provide  reliable  control  for  the  actual 


Proof.  As  in  the  development  of  Section  3.1,  the  existence  of  appropriate  solutions  to  the  design 
equations  (5.47)  and  (5.48)  guarantees  that  Xe  >0  satisfies 

Fj X,  +  X,F,  +  ^  Hj He  =  Q.  (5.52) 

Unlike  the  dual  case,  the  additional  columns  of  enter  into  the  linear  coefficient  matrix  F^  of 
(5.52),  as  well  as  into  the  quadratic  coefficient  as  explicitly  indicated.  This  is  because  the  controller 
structure  (5.49)  is  affected  if  G  is  replaced  by  G+.  Hence,  F^  and  Ge+  are  now  given  by 

A  -BBJX.  'j  ^  (  G+  0 
LcC  Aae  ~  LcCc  j  y  0  Xc 

with  Aac  =  Diag(Ao,>la, .. .,  Aa)  and  Aa  =  A+a~^G^.G^X  —  SX .  Manipulations  of  (5.52)  similar 
to  those  of  the  dual  case,  using  (5.46),  (5.50),  and  (5.53),  give 

fLx.  +  x,F.^  +  -^x.a.(ilx.  +  JigB,^ 

<  -(X.B...  -  [x°bJ)(BLX.  -  (0  BlX.)  <  0. 

Provided  {Feo,Heo)  is  a  detectable  pair,  therefore.  Lemma  2.1  guarantees  that  Fee  is  Hurwitz, 
and  that  Te(s)  =  Heo{sI  —  Feo)~^Ge  satisfies  ((Telloo  <  a.  To  establish  detectability,  let  = 
(vj"  vj)  0  satisfy  Feav  =  Au  and  HeoV  =  0.  Then  Avi  =  Aut  and  Hvi  =  0.  Since  {A,H)  is  a 
detectable  pair,  this  implies  either  Re(X)  <  0  or  Wj  =  0.  Suppose  vi  =  0;  then  FcqV  =  Av  gives 


{Aac  -  LcCc)v2  =  Av2.  (5.54) 

Since  all  controllers  are  assumed  open-loop  stable,  (5.54)  gives  Re{\)  <  0.  Q.E.D. 

The  two  decentralized  design  methods  given  in  Theorems  5.3  and  5.4  assume  controller  failures 
modelled  as,  respectively,  measurement  faulures  and  actuator  failures.  The  failures  considered  inca¬ 
pacitate  entire  controllers,  so  that  measurement  failures  and  actuator  failures  have  the  same  effect 
on  the  closed-loop  transfer-function  matrix.  Although  the  two  designs  have  the  same  reliability 
goals,  they  are  nevertheless  different:  The  first  automatically  guarantees  reliable  stability  if  the  de¬ 
sign  equations  have  appropriate  solutions,  whereas  the  second  may  exist  but  not  guarantee  reliable 
stability  if  the  controllers  are  not  open-loop  stable;  the  first  design  involves  only  modification  of 
feedback  and  observer  gains  as  compared  with  the  basic  design,  while  the  second  requires  also  a 


63 


change  in  the  observer  structure;  and  the  range  of  the  design  parameter  a  for  which  the  two  designs 
are  computable  may  differ. 

In  the  centralized  case  considered  in  Theorems  5.1  and  5.2,  the  failures  considered  are  those  of 
individual  sensors  or  actuators.  Therefore,  the  two  centralized  design  methods  differ  not  only  in  the 
view  taken  of  controller  failure,  and  in  other  technical  terms,  but  also  in  the  reliability  properties 
they  seek  to  guarantee. 


5.4  Example 

For  the  plant  of  the  example  in  Section  3.2,  the  reliable  decentralized  control  design  method 
of  Theorem  5.3  was  applied  for  various  values  of  the  design  parameter  a.  Table  5.2  gives  the 
actual  Hoo  norms  of  the  closed-loop  transfer-function  matrices  resulting  when  the  reliable  design 
was  computed  for  several  values  of  a.  For  the  sake  of  comparison,  the  comparable  portion  of  Table 
5.1,  corresponding  to  the  basic  decentralized  designs,  is  reproduced.  In  addition  to  Hoo  norms  for 
the  case  where  no  controller  failure  occurs,  the  Hoo  norms  corresponding  to  a  failure  of  each  of  the 
two  controllers  are  @ven. 

Table  5.2  shows  that,  unlike  the  basic  design,  the  reliable  design  guarantees  stability  and  Hoo- 
norm  bound  a  in  spite  of  a  possible  failure  of  Controller  #1.  In  fact,  a  failure  of  Controller  #1 
actually  results  in  a  reduced  Hoo  norm  for  the  closed-loop  system.  This  is  possible  because,  when 
Controller  #1  fails,  the  disturbance  w\  and  the  control  input  u\  are  removed  from  consideration.  A 
significant  proportion  of  the  cost  associated  with  the  design  is  the  result  of  expended  control  energy, 
which  is  reduced  when  a  controller  fails.  However,  this  reduction  in  cost  does  not  constitute  a  good 
argument  for  discarding  Controller  #1  and  using  Controller  #2  alone.  The  use  of  two  controllers 
increases  the  reliability  of  the  system,  in  that  a  single  controller  failure  will  not  result  in  system 
instability.  Note  that  no  solution  was  found  to  the  Riccati-like  algebraic  equation  for  the  reliable 

Table  5.2.  Hqq  norms  for  basic  and  reliable  decentralized  designs. 


Basic  Design 

no  failure  #1  fails  |  #2  fails 
20  3.63  unstable 

16  3.63  unstable 

a  =  14  3.61  unstable  5.28  8.28  |  6.32  |  8.59 

a  =  12  3.59  unstable  5.23  No  solution  to  RLAE  found. 


64 


design  with  a  <  13,  while  solutions  were  computed  for  the  basic  design  with  the  design  parameter 
value  as  small  as  a  =  2.  This  difference  represents  the  tradeoff  between  reliability  and  disturbamce 
attenuation  guaranteed  by  the  respective  designs. 


5.5  Strongly  Stabilizing  Designs 


The  designs  given  in  Theorems  5.3  and  5.4  provide  decentralized  control  laws  which  are  reliable 
with  respect  to  controller  outages.  For  the  design  ^ven  in  Theorem  5.3,  all  controllers  susceptible  to 
outages  are  automatically  stable;  however,  for  the  design  given  in  Theorem  5.4,  the  controllers  must 
be  assumed  to  turn  out  stable  for  the  closed-loop  system  to  be  guaranteed  stable.  A  decentralized 
design  is  now  developed  to  guarantee  open-loop  stability  of  some  subset  of  controllers,  without 
regard  for  performance  in  case  of  a  controller  outage.  This  design  may  be  combined  with  that  of 
Theorem  5.4  so  as  to  guarantee  beforehand  that  specified  controllers  will  turn  out  open-loop  stable. 
As  a  special  case,  a  strongly  stabilizing  centralized  design  is  also  derived. 

With  the  design  otherwise  as  in  Theorem  3.1,  suppose  Equation  (3.19)  is  replaced  by 

WA!  +  acW  +  ^WXcBcBjXcW-WCjCcW  +  GcGj  ,  ^ 

(5.55) 

{W-  WD)CjCciW  -Wd)  +  P  =  0. 

For  any  P  >  0,  the  design  guarantees  closed-loop  stability  and  the  ^oo-norm  bound  ||r||oo  <  a- 
The  object  is  to  select  P  >  0  so  that  the  i***  controller  is  open-loop  stable.  Rewrite  (5.55)  as 

-  LcCcf  +  (Ac  -  LcCc)W  +  -^WXcBcB^XcW  +  GcGJ  +  +  P  =  Q.  (5.56) 

Recalling  the  definitions  Aac  =  Diag(Aa,  Ac,...  ,Ac,),  if  =  [/  /.../],  and  Ac  =  Aoc  +  IcBBjXc, 
rewrite  (5.56)  as 


W(A„c  -  LcCcV  +  {Aoc  -  LcCc)W  +  ^WXcBcBjXcW 
+GcGj  +  LcLl  +  P  +  IcBBjXcW  +  WXcBcB'^lJ  =  0. 


(5.57) 
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The  i***  n  X  n  main- diagonal  block  of  (5.57)  is 


Wii(Aa  -  LiCif  +  -  LiCi)Wii  +  MWii . . .  Wi,)XcB,BjXc 


■\-GG^  +  LiLj  +  Pa  +  BBjXc 


\  / 


^  Wu  'V 


\  / 


(5.58) 


+  (Wii...Wi,)XcBcB^  =  0, 


where  the  lineair  coefficient  {Aa  —  LiCi)  is  the  open-loop  dynamic  matrix  of  the  controller.  To 
ensure  that  (Aa  —  LiCi)  will  be  Hurwitz,  let  Pa  =  a^S  =  a^BB"^ .  Then  (5.58)  becomes 


W^u(Aa  -  LiCif  -I-  {Aa  -  LiCi)Wii  -I-  -I-  LiLf 


=  -(afl  -H  L(Wa  . . .  Wi,)XcB,)iaB^  -1-  LbJX^ 


/  mi 


\  / 


)<0, 


(5.59) 


with  Wii  >  0.  To  see  that  this  is  sufficient  to  guarantee  that  (A^  -  LiCi)  is  Hurwitz,  let  v  7^  0 
satisfy  (Aa  -  LiCi)^v  =  Xv.  Then  (5.59)  gives 


2Re{X)v^Wiiv  +  v^LiLjv  <  0, 


and  hence  iZe(A)  <  0.  But  inequality  must  hold  here,  because  Ue(A)  =  0  implies  Ljv  =  0,  and 
hence  A^v  =  Xv,  with  Aa  assumed  Hurwitz. 

Note  that  Pa  >  a^S  guarantees  that  the  controller  will  be  stable,  independent  of  the  other 
main-diagonal  blocks  of  P.  Therefore,  several  controllers  may  be  simultaneously  guaranteed  open- 
loop  stable  by  selecting  the  mmn-diagonal  blocks  Pa  of  P  to  satisfy  Pa  >  0  if  the  controller 
need  not  be  stable,  and  Pa  >  a^S  if  the  t***  controller  must  be  stable.  The  other  blocks  of  P  may 
be  chosen  in  any  way  that  makes  P  >  0,  such  as  setting  them  all  to  0. 

The  following  theorem  summarizes  the  result. 

Theorem  5.5.  Let  P  be  u,ny  qn  x  qn  matrix  satisfying 


P  >  Diag(Pu,...,P«,0,...,0), 
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where  Pa  =s  a^S  for  i  €  {1,2, .. .  ,<}.  With  all  assumptions  and  the  design  otherwise  as  in  Theorem 
3.1,  suppose  Equation~[3.19)  is  replaced  by 

WAj  +  AcW  +  ^WXcBcBjXcW-WCjCcW  +  GcGj 

(5.60) 

+  (W-  WD)CjCciW  -Wd)  +  P  =  0. 

Then  the  design,  in  addition  to  its  other  properties,  guarantees  that  the  controllers  in  the  first  t 
control  channels  are  all  open-loop  stable. 

The  result  of  Theorem  5.5  is  easily  specialized  to  the  centralized  case.  It  is  important  to  note, 
however,  that  the  solution  W  of  the  Riccati-like  design  equation  with  9  =  1  is  not  the  same  as  the 
solution  y  of  the  observer  design  ARE  in  the  centralized  case.  Therefore,  the  reformulation  of  the 
design  equations  to  guarantee  strong  stabilization  in  the  centralized  case  is  not  as  simple  as  that 
given  in  Theorem  5.5.  The  following  theorem  gives  the  correct  formulation. 

Theorem  5.6.  With  all  assumptions  and  the  design  otherwise  as  in  Theorem  2.1,  letY  >0  satisfy 
the  ARE 

YF^  +  f  y  +  -^YH^ffY  -  YC^CY  +  -^YXSXY  +  GG'^  +  a^S  =  0,  (5.61) 

a* 

where  F  s  A  —  SX,  S  =  BB^ .  Then  the  system  is  strongly  stable,  and  the  closed-loop  transfer- 
function  matrix  satisfies  ||T||oo  <  ct. 

Proof.  For  the  special  case  9=1,  the  strong  stabilization  result  of  Theorem  5.5  still  holds.  In  this 
case,  the  design  equation  (5.60)  is 


W(A-ha-^GG^Xf  +  (A-i-a-^GG^X)W  +  ^WXSXW 

-  WC^CW -i- GC^  +  a^S  =  0. 


(5.62) 


Hence,  the  proof  consists  of  showing  that  (5.61)  implies  (5.62).  Recall  the  assumption  from  Theorem 
2.1  that  <rniax{T’X}  <  or  {a^Y~^  -  A”)  >  0.  This  implies  that  there  exists  a  matrix  ly  >  0  such 
that 

W-^  =  y-i  -  a-^X.  (5.63) 

Then,  routine  manipulations  of  (5.61)  give  the  equivalent  equation 

YA'^  -hAY-h  \yh'^HY  -  YC'^CY  +  +  a'^YW-'^ SW^Y  =  0.  (5.64) 
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Pre-  and  poet-muitiply  (5.64)  by  Y~^,  and  use  (5.63)  to  obtain 


A'^ia-'^X +  W-^)  +  ia-^X  +  W-^)A  +  ia-^X  +  W-^)GG'^ia-^X  +  W-^) 

(5.65) 

+  -  C’^C  +  a‘^W-^SW-^  =  0. 

Now,  divide  the  state-feedback  design  ARE  (3.3)  by  to  obtain 

A'^{a-^X)  +  (q-’A-)A  -h  {a-^X)GG'^{a-^X)  -  -^XSX  +  =  0,  (5.66) 

and  subtract  (5.66)  from  (5.65)  to  obtain 

A^W-^  +  W-^A  +  ia-^X)GG^W-^ +  W-^GG^ia-^X)  ^ 

(5.67) 

+  W-^GG'^W-^  -  C^C  -J-  ^XSX  -I-  a^W-^SW-^  =  0. 

Finally,  pre-  and  post-multiply  (5.67)  by  W,  and  rearrange  terms  to  obtain  (5.62).  Q.E.D. 
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Chapter  6 


Parameterization  of  Families  of 
Controllers 


6.1  Preliminary  Results 

This  chapter  jpves  some  properties  of  a  certain  matrix  Riccati  function  related  to  the  computation 
of  families  of  control  laws.  The  matrix  Riccati  function  is  studied  in  greater  detail  in  [27]. 

Let  F  be  Hurwitz,  and  define  the  matrix  Riccati  function  R  by 

R{X)  =  F'^X  +  XF+  ^XGG^X  + 

The  following  property,  given  in  [34],  holds: 

Lemma  6.1.  If  R(X)  =  0,  then  X  >  0. 

Froo/.  Suppose  R(X)  =  0;  that  is, 

R(X)  =  F^X  +  XF  +  ^XGG^X  +  =  0.  (6.1) 

Define  P  =  -^XGG^X  +  Then  (6.1)  becomes  F^ X  +  XF  +  P  =  0,  with  F  Hurwitz  and 

P  >  0.  By  inertia  theorems  of  the  Lyapunov  equation  (see,  for  example,  [16]),  A"  >  0.  Q.E.D. 

The  following  lemma  gives  a  matrix  convexity  property  for  R: 
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Lemma  6.2.  For  i  £  let  Xi  be  symmetric  matrices  and  be  nonnegative  scalars 

satisfying  A'  =  1-  Then 

(6.2) 

Itsl  J  tal 


Proof.  Compute 


=  f^(F^X,  +  X,F+H'^B)  + 


isljal 


=  -  ^'t.XiGG'^Xi  I  1  +  ■^'zj^i^iXSG^  Xi 

<=1  “  .=1  ^  li.l  J  “ 

=  '^iS{Xi)-^Y^jy,»iXiGG‘^[Xi-Xj) 


r  i-1 


=  j2^iR(Xi)  -  ■^j^^fiiPiXiGG'^iXi  -  Xi)  +  E  MjXiGG^iXj  -  Xi) 

i=l  “  <=li=l  “  i=ljsst+l 

=  j^fiiRiXi)  -  ^j^j^fiifiiXiGG'^iXi  -  Xj)  +  ^YZPiUiXiGG'^iXiXj) 

iasl  “  i=li=l  »=lj=l 

-  ^Afl(Ari)  -  ^Y^i»i(Xi  -  Xi)GG'^(Xi  -  Xi). 


Therefore,  i2{5ZJ=i  0iR-i^i)}  ^  d=i  0iR{Xi),  the  desired  result. 


(6.3) 

Q.E.D. 


The  following  corollary  identifies  a  class  of  easily  computable  matrices  Z  >  0  for  which  R(Z)  < 

0: 

Lemma  6.3.  Let  Z  be  any  convex  combination  of  matrices  Xi  >  0,  t  £  {1,2,  ...,r},  satisfying 
R(Xi)  =  0.  Then  Z  >0  satisfies 

R(Z)  <  0.  (6.4) 

Proof.  Express  Z  as 

z  =  EAXi. 

i=l 

where  EIsi  A  =  1-  From  Lemma  6.1,  Z  >  0,  and  from  Lemma  6.2, 

R(Z)  =  I  <  i^lSiRiXi)  =  0. 

(,.=1  J  i=i 
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Q.E.D. 


6.2  A  Family  of  State-feedback  Controls 

Consider  the  plant  (1.3)  with  {A,H)  a  detectable  padr.  To  derive  a  characterization  of  a  family 
of  stabilizing  state-feedback  controls  which  guarantee  a  predetermined  ^oo-norm  bound,  start  with 
the  design 

u  =  -B^Xx  (6.5) 


where 

A^X  ■\-XA  +  ^XGG'^X  -  XBB'^X  +  =  0,  X  >  0.  (6.6) 

Q,/ 

Rearrange  (6.6)  as 


F'^X  -I-  A'F  -I-  ^XGG'^X  +  (XBB^X  +  H’^H)  =  0,  (6.7) 

with  F  —  A  —  BB'^X.  Since  (^4,  H)  is  a  detectable  pair,  so  is  {F,  H'^H  -|-  XBB'^X).  Therefore,  by 
Lemma  2.1,  F  is  Hurwitz,  and  the  transfer  function 


r(s)  = 


H 

-B'^X 


(si  -  Fy'G 


from  lup  to  z  satisfies  |(T||oo  <  «•  Note  that  any  matrix  X  >  0  satisfying  (6.6)  gives  this  result, 
so  that  if  (6.6)  has  more  than  one  positive  semi-dehnite  solution,  any  one  of  them  can  be  used  to 
define  the  control  (6.5).  In  fact,  since  Lemma  2.1  would  still  apply  if  the  left-hand  side  of  (6.7) 
were  negative  seml-dehnite,  any  control  law  given  by 


«  =  —B^Zx,  (6.8) 

A^Z  +  ZA  +  -^ZGG^Z  -  ZBB^Z  -I-  H^H  <0,  Z>0  (6.9) 

provides  stability  and  the  Hoo-norm  bound  a  for  the  closed-loop  system. 

A  given  solution  X  >  0  of  (6.6)  will  be  called  the  “central”  solution.  Given  such  a  central 
solution,  a  family  of  matrices  Z  >0  satisfying  (6.9),  and  hence  a  family  of  stabilizing  state-feedback 
control  laws  which  guarantee  the  closed-loop  bound  UTHoo  <  <*,  is  characterized. 
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Take  X  >  0  to  be  the  central  solution  of  (6.6),  and  hence  a  solution  of  (6.7)  with  F  =  A-BB^X. 
Given  this  fixed  matrix  X,  define  the  matrix  Riccati  function  R  by 

R{M)  =  F'^M  +  MF  +  +  {XBB^X  +  (6.10) 

By  Lemma  6.1,  each  solution  of  R(X<)  =  0  satisfies  Xi  >  0.  Let  Z  >  0  be  any  convex  combination 
of  solutions  Xi  of  R{Xi)  =  0.  By  Lemma  6.3, 

R(Z)  =  F^Z  +  ZF  +  ^ZGG'^Z  +  (XBB^X  +  <  0.  (6.11) 

To  see  that  Z  >  0  satisfies  (6.9),  rearrange  (6.11)  to  obtain 

A^Z  +  ZA  +  ^ZGG^Z  -  ZBB^Z  + 

<  -ZBB'^Z  +  ZBB'^X  +  XBB'^Z  -  XBB'^X 
=  -(Z  -  X)BB'^{Z  -  X)  <  0. 

The  following  theorem  summarizes  the  characterization  of  a  family  of  state-feedback  Hoo  con¬ 
trols: 

Theorem  6.1.  Let  F  =  ^4  -  BB^X  where  X  >0  solves  the  ARE 

A^X  +  XA-\-  ^XGG^X  -  XBB^X  +  =  0.  (6.12) 

a* 

Then,  (or  any  convex  combination  Z  of  solutions  Xi  of  the  ARE 

F'^Xi  +  XiF  +  ^XiGG^Xi  -1-  (XBB^X  +  =  0,  (6.13) 

Fz  =  A  —  BB'^Z  is  Hurwitz,  and  the  state- feed back  control  law 

u  =  -B^Zx 


guarantees  that 


satisfies  ||r||oo  <  <*• 


(sI-Fz)-^G 
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6.3  A  Family  of  Output-feedback  Controls 

The  approach  of  Theorem  6.1  extends  to  the  output-feedback  case:  Start  with  Z  >  0  a  convex 
combination  of  solutions  Xi  of  (6.13).  Define 

Ui  =  A^Z  +  ZA  +  ^ZGG^Z  -  ZBB^Z  +  (6.14) 

By  Lemma  6.3,  Ui  <  0.  The  following  theorem  now  ^ves  a  family  of  observers  for  each  state- 
feedback  Hoo  control  characterized  by  such  a  Z. 

Theorem  6.2.  Assume  A  -I-  a~^GCj^Z  —  BB^Z  is  Hurwitz.  Let  y  >  0  satisfy 

AY  +  YA'^  -I-  ■^YH'^HY  -  YC'^CY  +  GG'^  =  0,  (6.15) 

with  (A  —  YC^C)  Hurwitz.  Let  V  >  0  be  any  convex  combination  of  solutions  Yi  of 

(A  -  -  YC^Cf  +  -  V,)Y  +  {YC^CY  +  =  0  (6.16) 

satisfying  cr„.,{VZ}  <  and  define  the  observer  gain  L  by 

L  =  (I-  a-^VZ)-^VC'^  =  (V-i  -  a-'^Z)-^C^,  (6.17) 

Then,  the  controller 

^  =  (^  +  -  BB'^Z  -  LC)^  +  Ly,  (6.18a) 

a  =  -B'^Zx,  (6.186) 

stabilizes  the  plant  (1.3),  and  provides  the  closed-loop  H^-norm  bound  HTHoo  <  a- 

Proof.  First  note  that,  since  Ux  <  0,  {H^H  —  Ui)  >  0.  By  Lemma  6.3, 

{A  -  YC^C)V  -I-  ViA  -  YC'^C)'^  +  -  Ux)V  -I-  {YC'^CY  -|-  GG^)  <  0.  (6.19) 

Algebraic  manipulations  similar  to  those  in  the  proof  of  Theorem  6.1  give 

AV  -I-  VA^  +  ^VH^HV  -  VC'^CV  GG^  <  ^VUxV.  (6.20) 

Pre-  and  post-multiply  (6.20)  by  aV~^  to  obtain 

(aV-^)A  -h  ^^(a^V-^)  +  H'^H  -  a^C'^C  +  ^(a*V-MGG^(a2y-^)  <  Ui.  (6.21) 
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Subtract  (6.14)  from  (6.21)  to  obtain 

(a^V-^  -  Z)A  +  A^(a^V-^  -  Z)  -  a'^C'^C  +  ^(Q^V-^)C?G^(aV-^) 
+ZBB'^Z  -  \ZGG^Z  <  0 

Define  Xi  =  (a^V”^  —  Z)  >  0.  Then  (6.22)  becomes 

XiA  +  A'^Xi  -  a^C'^C  +  -^5(A‘i  +  Z)GG^(Xi  +  Z)  +  ZBB^Z  -  -^ZGG'^Z  <  0. 

O'* 


(6.22) 


(6.23) 


Now  define  <  0  as  the  left-hand  side  of  (6.23);  rearran^ng  terms,  (6.23)  becomes 


U2  H  Xi(A  +  a-^GG'^Z  -  LC)  -KA  -I-  a-^GG'^Z  -  LCfXi 

■\-a^Cf^C  +  -^XiGG'^Xi  +  ZBB'^Z  <  0. 


(6.24) 


With  the  controller  (6.18),  the  closed-loop  system  transformed  to  error  coordinates  is  described  by 


^  _  I  A  -  BB'^Z  -BB'^Z  \  ^  _  I  G  0 

a-^GC^Z  A  +  a-^GG'^Z  -  LC  }  ‘  ~  \  -G  L 


ffe  = 


H  0 
-Bi^Z  -B'^Z 


Define 


and  consider  the  quantity 


Xe  = 


Z  0 
0  Xi 


>0, 


1 


XeFe  +  F,^Xe  +  ~^X^G,G'^X,  +  HJ  H, 


(6.25) 


The  two  olf-diagonal  blocks  of  (6.25)  are  identically  zero.  The  upper-left  block  of  (6.25)  gives  U\ 
defined  in  (6.14),  and  the  lower-right  block  gives  U2  defined  in  (6.24);  therefore, 

Xeh  +  FjXe  +  \XeG^GlXe  °  1  <  0. 

“  U2  } 

By  Lemma  2.1,  Fe  is  Hurwitz,  and  T(s)  =  H^{sl  -  Fe)~^Gc  satisfies  l|T||oo  <  a,  provided  {Fe,He) 
is  a  detectable  pair.  Detectability  is  proved  exactly  as  in  the  development  of  Theorem  2.1.  Q.E.D. 
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Recall  that  Theorem  1.3  gives  a  parameterization  of  the  set  of  all  output-feedback  controllers 
guaranteeing  the  ^oo-Qorm  bound  a.  Some  of  these  controllers  are  of  high  order,  and  are  therefore 
undesirable.  By  contrast,  Theorem  6.2  characterizes  a  family  of  controllers  with  realizations  all  of 
the  same  order  as  the  plant,  which  all  guarantee  the  ^oo-norm  bound  a. 


6.4  A  Family  of  Decentralized  Controls 

A  generalization  of  Theorem  6.2  to  the  decentralized  case  cannot  be  readily  obtained.  Manip¬ 
ulations  like  those  in  the  proof  of  Theorem  6.2  applied  to  the  Riccati-like  (decentralized)  design 
equation  do  not  give  the  desired  result.  Therefore,  while  Theorem  6.2  gives  a  family  of  observer 
designs  for  each  state-feedback  design,  the  next  theorem  gives  only  one  decentralized  observer  de¬ 
sign  for  each  state-feedback  design  of  Theorem  6.1.  The  definitions  of  Z  and  Ui  assumed  in  the 
theorem  statement  are  as  above. 

Theorem  6.3.  Assume  A  -I-  a~^GG^Z  —  BB^Z  is  Hurwitz  and  A  -}-  a~^GG^Z  has  no  ju-axis 
eigenvalues.  Let  W  >  0  satisfy  the  RJccati-like  algebraic  equation 

AcW  +  WAf  +  -^WXcBcBj XcW^  WCj CcW 

+GcGj  -1-  (ly  -  Wd)CJCc{W  -  Wd)  =  0, 

and  compute  Lc  =  Diag  {Li,L2,..,,Lq)  as 

Lc  =  WdCJ.  (6.27) 

Then,  the  control  law 

I  =(^A  +  ^GG^Z  -  BB^Z  -  XiC,)  f  i  6  {1, 2, . . . ,  g}, 

tij  =  ~-®i  *  €  {1, 2, . . . , g}, 

stabilizes  the  plant  (1.14),  and  provides  the  closed-loop  ffgo-norm  bound  HTHoo  <  ct 
Proof.  Using  (6.27),  rewrite  (6.26)  as 

(Ac  -  LcCc)W  +  W(Ac  -  LcCcf  +  -^WX.BcBjXcW  GcGJ  -H  =  0.  (6.29) 


(6.28o) 

(6.28b) 
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Pre-  and  post-multiply  (6.29)  by  aW~^  to  obtiun 


(a2vp-i)(.4c  -  LcCc)  +  (Ac  -  LcCc)(o?W-^)  +  XcBcBJXc 

+^(a^W-^)iGcGj  +  LcLl)(a^W-'^)  =  0. 

With  controllers  (6.28),  the  closed-loop  system  is  described  by  the  matrices 

A-BB^Z  -BBTZc  \  ^  (  G  0 


(6.30) 


Fe  = 


Be  = 


"  1  ,  <5e  = 

a'^GcG'^Z  Ac  -  LcCc  j  ’  ‘  \  -Gc  Lc 


H 


(6.31) 


-B'^Z  -BjZc 

where  (6.31)  differs  from  (3.11)  only  in  that  X  has  been  replaced  everywhere  by  Z.  Define 

Z  0 


and  consider  the  quantity 


Xe=\  I  >  0, 

0  a^W--^ 


XeFe  +  FjJ^e  +  ^JteGeGjXe  +  HJ  He. 


(6.32) 


The  two  off-diagonal  blocks  of  (6.32)  are  identically  zero.  The  upper-left  block  of  (6.32)  gives  Ui 
defined  in  (6.14).  The  lower-right  block  is  zero  by  (6.30).  Therefore, 

XeFe  +  FjXe  +  ^XeGeClJ Xe  +  HJ He  =  \  ^  1  <  0. 

V  0  0 ; 

By  Lemma  3.1,  (Fe,He)  is  a  detectable  pair;  therefore,  by  Lemma  2.1,  the  closed-loop  system  is 
stable,  and  the  closed-loop  transfer-function  matrix  r(s)  =  He(sl  -  Fe)~^Ge  satisfies  \\T\\oo  <  a- 
Q.E.D. 


Similar  to  Theorem  6.2  in  the  centralized  case,  Theorem  6.3  gives  a  family  of  decentralized 
control  laws  which  guarantee  a  predetermined  /Too-norm  bound  for  the  closed-loop  system,  and 
which  are  characterized  by  controllers  of  the  same  order  as  the  plant.  Unlike  the  centralized  case, 
the  family  of  decentralized  controls  consists  of  only  a  single  controller  associated  with  each  member 
of  a  family  of  state-feedback  controls. 
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Chapter  7 


Conclusions 


This  thesis  has  presented  a  unified  approach  to  the  design  of  robust  and  reliable  decentralized 
control  systems.  The  basic  decentralized  design  developed  includes  an  observer-type  controller  in 
each  control  channel,  which  uses  a  state-feedback  model  for  unknown  disturbances.  Feedback  gains 
are  computed  from  a  state- feedback  design  ARE,  and  observer  gains  are  computed  from  a  Riccati- 
like  algebraic  equation.  The  existence  of  solutions  to  the  design  equations  guarantees  that  the 
closed-loop  system  matrices  satisfy  an  algebraic  Riccati  inequality,  which  is  sufficient  to  establish 
stability  and  a  predetermined  Hoo  disturbance-attenuation  bound.  This  bound  is  included  in  the 
design  equations  as  the  parameter  a.  Appropriate  solutions  to  the  design  equations  will  exist  only 
for  sufficiently  large  values  of  a. 

No  necessary  condition,  other  than  the  absence  of  unstable  fixed  modes,  has  been  found  for 
the  solution  of  the  Riccati-like  equation  to  exist.  On  the  other  hand,  neither  has  any  sufficient 
condition  for  its  solution  been  derived.  A  simple  iterative  method  for  solving  the  Riccati-like 
algebraic  equation  has  been  used  with  excellent  results;  however,  there  is  no  guarantee  that  this 
iterative  method  will  yield  a  solution  whenever  one  exists.  Existence  conditions  and  computational 
methods  for  solutions  of  the  Riccati-like  equation  are  subjects  for  future  research. 

A  modification  of  the  basic  design  produces  a  decentralized  control  law  which  is  robust  with 
respect  to  structured  plant  uncertainty.  The  design  modification  is  equivalent  to  including  addi¬ 
tional  disturbances  and  regulated  outputs  in  the  nominal  plant  description.  In  addition  to  the 
choice  of  the  design  parameter  a,  there  is  freedom  in  the  robust  design  to  specify  bounds  <Tfc  on 
the  norms  of  uncertainty  terms  for  which  robustness  is  desired.  If  these  bounds  are  too  large. 
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appropriate  solutions  to  the  design  equations  will  not  exist.  The  (T^’s  may  be  varied  as  design 
parameters  to  determine  the  largest  uncertainty  bounds  for  which  the  robust  design  exists.  Alter¬ 
natively,  the  <Tk's  may  be  chosen  simply  to  define  a  relative  weighting  to  be  given  to  robustness  and 
disturbance-rejection  considerations  in  the  design. 

Another  modification  of  the  basic  design  produces  centralized  and  decentralized  control  laws 
which  provide  stability  and  Hoo  disturbance  attenuation  not  only  when  the  system  is  operating 
properly,  but  also  in  the  presence  of  certain  system  measurement  or  control  input  failures.  The 
design  modification  is  equivalent  to  including  in  the  plant  description  additional  disturbances  or 
regulated  outputs  to  account  for  possible  control  input  or  measurement  outages,  respectively.  Given 
the  existence  of  appropriate  solutions  of  the  design  equations,  the  reliable  designs  can  tolerate 
system  component  outages  within  a  prespecified  set  of  susceptible  sensors  or  actuators  in  the 
centralized  case,  or  within  a  prespecified  set  of  susceptible  controllers  in  the  decentralized  case. 
Of  course,  for  appropriate  solutions  of  the  design  equations  to  exist,  the  measurement  and  control 
components  not  included  in  the  susceptible  set  must  be  able  to  stabilize  the  system  by  themselves. 

In  the  case  of  control  laws  designed  to  tolerate  possible  actuator  outages,  the  additional  condi¬ 
tion  that  the  control  law  be  open-loop  stable  is  required.  If  such  a  design  is  attempted,  but  results 
in  an  unstable  controller,  closed-loop  system  stability  is  not  guaranteed.  In  this  case,  the  design 
can  be  further  modified  to  include  strong-stabiDzation  properties.  In  the  decentralized  case,  for 
example,  the  combined  design  modifications  would  consist  of  (i)  appending  the  columns  of  uBq 
to  the  disturbance  matrix  G  in  the  plant  description,  and  (ii)  adding  a  constant  block-diagonal 
matrix,  with  a^BB^  blocks  on  its  mmn  diagonal,  to  the  left-hand  side  of  the  Riccati-like  design 
equation. 

The  robust  and  reliable  designs  are  obtained  at  the  cost  of  allowing  a  higher  Hoo  disturbance- 
attenuation  bound.  This  is  natural,  since  the  larger  the  fiToo-norm  bound  is  allowed  to  be,  the  larger 
is  the  set  of  controllers  which  will  guarantee  that  bound.  For  a  sufficiently  large  bound,  then,  the 
corresponding  set  of  controllers  may  include  controllers  with  desired  special  properties.  The  design 
methods  presented  in  this  thesis  select  such  controllers  from  among  all  controllers  which  guarantee 
the  specified  disturbance-attenuation  bound. 

A  convexity  property  of  a  certain  matrix  Riccati  function  is  used  to  develop  a  parameterization 
of  families  of  controllers  which  provide  stability  and  Hoo  disturbance  attenuation.  This  param- 
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eterization  has  two  advantages  over  the  one  given  in  Theorem  1.3:  First,  it  includes  families  of 
decentralized  control  laws.  Second,  it  gives  only  controller  realizations  of  the  same  order  as  the 
plant.  Hence,  the  order  of  the  plant  is  an  upper  bound  for  the  order  of  a  minimal  realization  of  any 
of  the  controllers  in  a  given  family.  One  criterion  for  choosing  among  the  controllers  could  be  the 
order  of  their  minimal  realizations.  How  to  choose  from  the  family  a  controller  with  a  lower-order 
minimal  realization  is  a  problem  for  future  research. 
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